Skip to content
This repository was archived by the owner on Dec 7, 2025. It is now read-only.

Commit 8c47e6d

Browse files
justgithubaccountjustgithubaccount
committed
Fix v104
1 parent 1b69552 commit 8c47e6d

13 files changed

+260
-9
lines changed

‎.gitignore‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,6 @@ chat-api-secrets.yaml
1515
litellm-secrets.yaml
1616
loki-secrets.yaml
1717
pg-secrets.yaml
18-
.env.litellm
18+
.env.litellm
19+
secret-cloudflare-external-dns.yaml
20+
secret-cloudflare-cert-manager.yaml

manifests/cert-manager-application.yaml renamed to manifests/app-cert-manager.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ spec:
1212
helm:
1313
values: |
1414
installCRDs: true
15+
extraArgs:
16+
- --dns01-recursive-nameservers-only
17+
- --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53
1518
destination:
1619
server: https://kubernetes.default.svc
1720
namespace: cert-manager

‎manifests/app-external-dns.yaml‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
apiVersion: argoproj.io/v1alpha1
2+
kind: Application
3+
metadata:
4+
name: external-dns
5+
namespace: argocd
6+
spec:
7+
project: default
8+
source:
9+
repoURL: https://kubernetes-sigs.github.io/external-dns/
10+
chart: external-dns
11+
targetRevision: 1.17.0
12+
helm:
13+
values: |
14+
provider: cloudflare
15+
sources:
16+
- ingress
17+
domainFilters:
18+
- syncjob.ru
19+
policy: upsert-only
20+
logLevel: debug
21+
extraEnvVars:
22+
- name: CF_API_TOKEN
23+
valueFrom:
24+
secretKeyRef:
25+
name: cloudflare-api-token
26+
key: api-token
27+
destination:
28+
server: https://kubernetes.default.svc
29+
namespace: external-dns
30+
syncPolicy:
31+
automated:
32+
selfHeal: true
33+
prune: true
34+
syncOptions:
35+
- CreateNamespace=true

manifests/grafana-application.yaml renamed to manifests/app-grafana.yaml

File renamed without changes.

‎manifests/cert-cluster.yaml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: Certificate
3+
metadata:
4+
name: wildcard-syncjob
5+
namespace: chat-api
6+
spec:
7+
secretName: wildcard-syncjob-tls
8+
dnsNames:
9+
- "*.syncjob.ru"
10+
- syncjob.ru
11+
issuerRef:
12+
name: letsencrypt-dns
13+
kind: ClusterIssuer

‎manifests/ingress-argo.yaml‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
apiVersion: networking.k8s.io/v1
2+
kind: Ingress
3+
metadata:
4+
name: argocd-server
5+
namespace: argocd
6+
annotations:
7+
cert-manager.io/cluster-issuer: letsencrypt-prod
8+
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
9+
nginx.ingress.kubernetes.io/ssl-redirect: "true"
10+
spec:
11+
ingressClassName: nginx
12+
tls:
13+
- hosts:
14+
- argo.syncjob.ru
15+
secretName: argocd-tls
16+
rules:
17+
- host: argo.syncjob.ru
18+
http:
19+
paths:
20+
- path: /
21+
pathType: Prefix
22+
backend:
23+
service:
24+
name: argocd-server
25+
port:
26+
number: 443

manifests/chat-api-ingress.yaml renamed to manifests/ingress-chat-api.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,14 @@ metadata:
44
name: chat-api
55
annotations:
66
# nginx.ingress.kubernetes.io/rewrite-target: /
7-
cert-manager.io/cluster-issuer: letsencrypt-prod
7+
cert-manager.io/cluster-issuer: letsencrypt-dns
88
ingress.kubernetes.io/ssl-redirect: "true"
99
spec:
1010
ingressClassName: nginx
1111
tls:
1212
- hosts:
1313
- chat.syncjob.ru
14-
secretName: chat-api-tls
14+
secretName: wildcard-syncjob-tls
1515
rules:
1616
- host: chat.syncjob.ru
1717
http:

manifests/grafana-ingress.yaml renamed to manifests/ingress-grafana.yaml

File renamed without changes.

manifests/cluster-issuer.yaml renamed to manifests/issuer-cluster.yaml

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,16 @@
11
apiVersion: cert-manager.io/v1
22
kind: ClusterIssuer
33
metadata:
4-
name: letsencrypt-prod
4+
name: letsencrypt-dns
55
spec:
66
acme:
7-
server: https://acme-v02.api.letsencrypt.org/directory
87
email: [email protected]
8+
server: https://acme-v02.api.letsencrypt.org/directory
99
privateKeySecretRef:
10-
name: letsencrypt-prod
10+
name: letsencrypt-dns-key
1111
solvers:
12-
- http01:
13-
ingress:
14-
class: nginx
12+
- dns01:
13+
cloudflare:
14+
apiTokenSecretRef:
15+
name: cloudflare-api-token
16+
key: api-token

‎manifests/secret-cloudflare-cert-manager-sealed.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
---
2+
apiVersion: bitnami.com/v1alpha1
3+
kind: SealedSecret
4+
metadata:
5+
creationTimestamp: null
6+
name: cloudflare-api-token
7+
namespace: cert-manager
8+
spec:
9+
encryptedData:
10+
api-token: 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
11+
template:
12+
metadata:
13+
creationTimestamp: null
14+
name: cloudflare-api-token
15+
namespace: cert-manager

0 commit comments

Comments
 (0)