change from cluster issuer to isser and added sufficient anotation

USHER-PB · USHER-PB · commit bb6ae29bc966 · 2026-02-14T06:13:07.000+01:00
diff --git a/argocd-agent/terraform/modules/hub-cluster/main.tf b/argocd-agent/terraform/modules/hub-cluster/main.tf
@@ -317,6 +317,8 @@ resource "kubernetes_ingress_v1" "argocd_ui" {
     annotations = {
       "nginx.ingress.kubernetes.io/force-ssl-redirect" = "true"
       "nginx.ingress.kubernetes.io/backend-protocol"   = "HTTP"
+      "nginx.org/ssl-redirect"                         = "true"
+      "acme.cert-manager.io/http01-edit-in-place"      = "true"
     }
   }
 
diff --git a/argocd-agent/terraform/modules/hub-cluster/variables.tf b/argocd-agent/terraform/modules/hub-cluster/variables.tf
@@ -319,7 +319,7 @@ variable "cert_issuer_name" {
 variable "cert_issuer_kind" {
   description = "Kind of cert-manager issuer: 'Issuer' (namespace-scoped) or 'ClusterIssuer' (cluster-wide)"
   type        = string
-  default     = "Issuer"
+  default     = "ClusterIssuer"
 }
 
 variable "letsencrypt_email" {

Original file line number	Diff line number	Diff line change
`@@ -317,6 +317,8 @@ resource "kubernetes_ingress_v1" "argocd_ui" {`
`317`	`317`	`annotations = {`
`318`	`318`	`"nginx.ingress.kubernetes.io/force-ssl-redirect" = "true"`
`319`	`319`	`"nginx.ingress.kubernetes.io/backend-protocol" = "HTTP"`
	`320`	`+ "nginx.org/ssl-redirect" = "true"`
	`321`	`+ "acme.cert-manager.io/http01-edit-in-place" = "true"`
`320`	`322`	`}`
`321`	`323`	`}`
`322`	`324`
Original file line number	Diff line number	Diff line change
`@@ -319,7 +319,7 @@ variable "cert_issuer_name" {`
`319`	`319`	`variable "cert_issuer_kind" {`
`320`	`320`	`description = "Kind of cert-manager issuer: 'Issuer' (namespace-scoped) or 'ClusterIssuer' (cluster-wide)"`
`321`	`321`	`type = string`
`322`		`- default = "Issuer"`
	`322`	`+ default = "ClusterIssuer"`
`323`	`323`	`}`
`324`	`324`
`325`	`325`	`variable "letsencrypt_email" {`