diff --git a/cert-manager/cert-exporter.config.yml b/cert-manager/cert-exporter.config.yml deleted file mode 100644 index 410630f..0000000 --- a/cert-manager/cert-exporter.config.yml +++ /dev/null @@ -1,7 +0,0 @@ -git_repo: gitea@git.pyrocufflink.blue:dustin/certs.git -certs: -- name: pyrocufflink-cert - namespace: default - key: certificates/_.pyrocufflink.net.key - cert: certificates/_.pyrocufflink.net.crt - bundle: certificates/_.pyrocufflink.net.pem diff --git a/cert-manager/cert-exporter.yaml b/cert-manager/cert-exporter.yaml deleted file mode 100644 index 09697b4..0000000 --- a/cert-manager/cert-exporter.yaml +++ /dev/null @@ -1,76 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: cert-exporter - namespace: cert-manager - ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: cert-exporter -rules: -- apiGroups: - - '' - resources: - - secrets - verbs: - - get - resourceNames: - - pyrocufflink-cert - ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: cert-exporter -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: cert-exporter -subjects: -- kind: ServiceAccount - name: cert-exporter - namespace: cert-manager - ---- -apiVersion: batch/v1 -kind: CronJob -metadata: - name: cert-exporter - namespace: cert-manager -spec: - timeZone: America/Chicago - schedule: '27 9,20 * * *' - jobTemplate: &jobtemplate - spec: - template: - spec: - containers: - - image: git.pyrocufflink.net/containerimages/cert-exporter - name: cert-exporter - volumeMounts: - - mountPath: /etc/cert-exporter/config.yml - name: config - subPath: config.yml - readOnly: true - - mountPath: /home/cert-exporter/.ssh/id_ed25519 - name: sshkeys - subPath: cert-exporter.pem - readOnly: true - - mountPath: /etc/ssh/ssh_known_hosts - name: sshkeys - subPath: ssh_known_hosts - readOnly: true - securityContext: - fsGroup: 1000 - serviceAccount: cert-exporter - volumes: - - name: config - configMap: - name: cert-exporter - - name: sshkeys - secret: - secretName: cert-exporter-sshkey - defaultMode: 00440 - restartPolicy: Never diff --git a/cert-manager/kustomization.yaml b/cert-manager/kustomization.yaml index 63f5100..dfeeddc 100644 --- a/cert-manager/kustomization.yaml +++ b/cert-manager/kustomization.yaml @@ -5,19 +5,10 @@ resources: - https://github.com/cert-manager/cert-manager/releases/download/v1.16.4/cert-manager.yaml - cluster-issuer.yaml - certificates.yaml -- cert-exporter.yaml - dch-ca-issuer.yaml - secrets.yaml - jenkins.yaml -configMapGenerator: -- name: cert-exporter - namespace: cert-manager - files: - - config.yml=cert-exporter.config.yml - options: - disableNameSuffixHash: True - secretGenerator: - name: zerossl-eab namespace: cert-manager @@ -26,12 +17,6 @@ secretGenerator: options: disableNameSuffixHash: true -- name: cert-exporter-sshkey - namespace: cert-manager - files: - - cert-exporter.pem - - ssh_known_hosts - - name: cloudflare namespace: cert-manager files: