Dustin C. Hatch
a443929c0c
Now that the reverse proxy for Internet-facing sites uses TLS passthrough, the certificate for the _darkchestofwonders.us_ Ingress needs to be correct. Since Ingress resources can only use either the default certificate (_*.pyrocufflink.blue_) or a certificate from their same namespace, we have to move the Certificate and its corresponding Secret into the _websites_ namespace. Fortunately, this is easy enoug to do, by setting the appropriate annotations on the Ingress. To keep the existing certificate (until it expires), I moved the Secret manually: ```sh kubectl get secret dcow-cert -o yaml | grep -v namespace | kubectl create -n websites -f - ```
139 lines
2.5 KiB
YAML
139 lines
2.5 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: pyrocufflink-cert
|
|
spec:
|
|
secretName: pyrocufflink-cert
|
|
dnsNames:
|
|
- '*.pyrocufflink.blue'
|
|
- '*.pyrocufflink.net'
|
|
- pyrocufflink.blue
|
|
- pyrocufflink.net
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: dustinhatchname-cert
|
|
spec:
|
|
secretName: dustinhatchname-cert
|
|
dnsNames:
|
|
- dustin.hatch.name
|
|
- '*.dustin.hatch.name'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: hatchchat-cert
|
|
spec:
|
|
secretName: hatchchat-cert
|
|
dnsNames:
|
|
- hatch.chat
|
|
- '*.hatch.chat'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: tabitha-cert
|
|
spec:
|
|
secretName: tabitha-cert
|
|
dnsNames:
|
|
- tabitha.biz
|
|
- '*.tabitha.biz'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: chmod777-cert
|
|
spec:
|
|
secretName: chmod777-cert
|
|
dnsNames:
|
|
- chmod777.sh
|
|
- '*.chmod777.sh'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: dustinandtabitha-cert
|
|
spec:
|
|
secretName: dustinandtabitha-cert
|
|
dnsNames:
|
|
- dustinandtabitha.com
|
|
- '*.dustinandtabitha.com'
|
|
- dustinandtabitha.xyz
|
|
- '*.dustinandtabitha.xyz'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: hlc-cert
|
|
spec:
|
|
secretName: hlc-cert
|
|
dnsNames:
|
|
- hatchlearningcenter.org
|
|
- '*.hatchlearningcenter.org'
|
|
- hatchlearningcenter.com
|
|
- '*.hatchlearningcenter.com'
|
|
- hlckc.org
|
|
- '*.hlckc.org'
|
|
- hlckc.com
|
|
- '*.hlckc.com'
|
|
- hlcks.org
|
|
- '*.hlcks.org'
|
|
- hlcks.com
|
|
- '*.hlcks.com'
|
|
issuerRef:
|
|
group: cert-manager.io
|
|
kind: ClusterIssuer
|
|
name: zerossl
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
rotationPolicy: Always
|