Ver Fonte

HUE-8888 [k8s] Harmonize TLS certificates generation

Romain há 6 anos atrás
pai
commit
d6db2e5db3

+ 2 - 2
tools/kubernetes/helm/hue/templates/clusterissuer-letsencrypt-prod.yaml

@@ -2,7 +2,7 @@
 apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
-  name: letsencrypt-prod
+  name: letsencrypt-hue-prod
 spec:
   acme:
     # The ACME server URL
@@ -11,7 +11,7 @@ spec:
     email: {{ .Values.ingress.email }}
     # Name of a secret used to store the ACME account private key
     privateKeySecretRef:
-      name: letsencrypt-prod
+      name: letsencrypt-hue-prod
     # Enable the HTTP-01 challenge provider
     solvers:
     - http01:

+ 2 - 2
tools/kubernetes/helm/hue/templates/ingress-https.yaml

@@ -5,7 +5,7 @@ metadata:
   name: hue
   annotations:
     kubernetes.io/ingress.class: nginx
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    cert-manager.io/cluster-issuer: letsencrypt-hue-prod
     cert-manager.io/acme-challenge-type: http01
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/affinity: "cookie"
@@ -24,5 +24,5 @@ spec:
   tls:
   - hosts:
     - {{ .Values.ingress.domain }}
-    secretName: letsencrypt-prod
+    secretName: letsencrypt-hue-prod-tls
 {{- end -}}

+ 4 - 4
tools/kubernetes/helm/website/templates/ingress-https.yaml

@@ -2,14 +2,14 @@
 apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
-  name: gethue-ingress
+  name: gethue
   annotations:
     kubernetes.io/ingress.class: nginx
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    cert-manager.io/cluster-issuer: letsencrypt-website-prod
     cert-manager.io/acme-challenge-type: http01
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/affinity: "cookie"
-    nginx.ingress.kubernetes.io/session-cookie-name: "gethue-website-ingress"
+    nginx.ingress.kubernetes.io/session-cookie-name: "gethue-website"
     nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
     nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
 spec:
@@ -40,5 +40,5 @@ spec:
     {{ if .Values.website.enabled }}
     - {{ .Values.website.domain }}
     {{ end }}
-    secretName: letsencrypt-website-prod
+    secretName: letsencrypt-website-prod-tls
 {{- end -}}