Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save jlengelbrecht/18aa869ac83f35ab4364699d6a1852d9 to your computer and use it in GitHub Desktop.

Select an option

Save jlengelbrecht/18aa869ac83f35ab4364699d6a1852d9 to your computer and use it in GitHub Desktop.
Folder structure
.
└── clusters
└── dev-cluster
├── flux-system
│ ├── gotk-components.yaml
│ ├── gotk-sync.yaml
│ └── kustomization.yaml
├── helmcharts
│ └── cert-manager
│ ├── certificates
│ │ ├── production
│ │ │ └── prod-dev-mycooldomain.yaml
│ │ └── staging
│ │ └── staging-dev-mycooldomain.yaml
│ ├── helmrelease.yaml
│ ├── issuers
│ │ ├── letsencrypt-production.yaml
│ │ └── letsencrypt-staging.yaml
│ └── secrets
│ └── secret-cf-token.yaml
├── manifests
│ └── nginx
│ ├── deployment.yaml
│ ├── ingress.yaml
│ └── service.yaml
└── readme.md
-----------------------------------------------------------------------------------------------------------------------
secret-cf-token.yaml
---
apiVersion: v1
kind: Secret
metadata:
name: cloudflare-token-secret
namespace: cert-manager
type: Opaque
stringData:
cloudflare-token: ${{ secrets.CF_TOKEN }}
secret is defined in codespace on github
------------------------------------------------------------------------------------------------------------------------
helmrelease.yaml
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: cert-manager
namespace: cert-manager
spec:
interval: 30m
chart:
spec:
chart: cert-manager
version: v1.14.5
sourceRef:
kind: HelmRepository
name: jetstack
namespace: flux-system
install:
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
strategy: rollback
retries: 3
values:
installCRDs: true
dns01RecursiveNameservers: 1.1.1.1:53,9.9.9.9:53
dns01RecursiveNameserversOnly: true
podDnsPolicy: None
podDnsConfig:
nameservers:
- "1.1.1.1"
- "9.9.9.9"
prometheus:
enabled: true
servicemonitor:
enabled: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment