feat: set traefik's tls secret to what is generated by cert-manager

2024-01-23 09:21:15 -05:00 · 2024-01-23 09:21:15 -05:00 · 4b281683d9
parent c1f4347ed2
commit 4b281683d9
38 changed files with 11 additions and 38 deletions
--- a/cluster/apps/authentik/helm-release.yaml
+++ b/cluster/apps/authentik/helm-release.yaml
@ -87,7 +87,6 @@ spec:
      tls:
        - hosts:
            - *host
-          secretName: wildcard-main-tls

    monitoring:
      enabled: false # temporarily disable monitoring
--- a/cluster/apps/database/minio/helm-release.yaml
+++ b/cluster/apps/database/minio/helm-release.yaml
@ -85,7 +85,6 @@ spec:
        tls:
          - hosts:
              - *console-host
-            secretName: wildcard-main-tls

      s3:
        enabled: true
@ -109,7 +108,6 @@ spec:
          - hosts:
              - *api-host
              - *api-host-wildcard
-            secretName: wildcard-main-tls

    podSecurityContext:
      runAsUser: 10000
--- a/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
+++ b/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
@ -27,7 +27,6 @@ spec:
      tls:
        - hosts:
            - *host
-          secretName: wildcard-main-tls

 #    securityContext:
 #      runAsUser: 10000
--- a/cluster/apps/default/cdn/helm-release.yaml
+++ b/cluster/apps/default/cdn/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls
            
    persistence:
      data:
--- a/cluster/apps/default/dendron/helm-release.yaml
+++ b/cluster/apps/default/dendron/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    podSecurityContext:
      runAsNonRoot: true
--- a/cluster/apps/default/fireflyiii/helm-release.yaml
+++ b/cluster/apps/default/fireflyiii/helm-release.yaml
@ -44,7 +44,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls
            
    persistence:
      firefly-uploads:
--- a/cluster/apps/default/trilium/helm-release.yaml
+++ b/cluster/apps/default/trilium/helm-release.yaml
@ -43,7 +43,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      storage:
--- a/cluster/apps/dev/code/helm-release.yaml
+++ b/cluster/apps/dev/code/helm-release.yaml
@ -56,7 +56,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

 #    persistence:
 #      config:
--- a/cluster/apps/download/bazarr/helm-release.yaml
+++ b/cluster/apps/download/bazarr/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/mylar3/helm-release.yaml
+++ b/cluster/apps/download/mylar3/helm-release.yaml
@ -51,7 +51,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/prowlarr/helm-release.yaml
+++ b/cluster/apps/download/prowlarr/helm-release.yaml
@ -91,7 +91,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/qbittorrent/helm-release.yaml
+++ b/cluster/apps/download/qbittorrent/helm-release.yaml
@ -96,7 +96,6 @@ spec:
        tls:
        - hosts:
          - *host
-          secretName: wildcard-main-tls

    persistence:
      storage:
--- a/cluster/apps/download/radarr/helm-release.yaml
+++ b/cluster/apps/download/radarr/helm-release.yaml
@ -91,7 +91,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/readarr/audiobook-helm.yaml
+++ b/cluster/apps/download/readarr/audiobook-helm.yaml
@ -92,7 +92,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/readarr/ebook-helm.yaml
+++ b/cluster/apps/download/readarr/ebook-helm.yaml
@ -92,7 +92,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/download/sonarr/helm-release.yaml
+++ b/cluster/apps/download/sonarr/helm-release.yaml
@ -92,7 +92,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/irc/thelounge/helm-release.yaml
+++ b/cluster/apps/irc/thelounge/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls
    persistence:
      config:
        enabled: true
--- a/cluster/apps/irc/znc/helm-release.yaml
+++ b/cluster/apps/irc/znc/helm-release.yaml
@ -67,7 +67,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/management/guacamole/helm-release.yaml
+++ b/cluster/apps/management/guacamole/helm-release.yaml
@ -54,7 +54,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/audiobookshelf/helm-release.yaml
+++ b/cluster/apps/media/audiobookshelf/helm-release.yaml
@ -43,7 +43,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/freshrss/helm-release.yaml
+++ b/cluster/apps/media/freshrss/helm-release.yaml
@ -45,7 +45,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/jellyfin/helm-release.yaml
+++ b/cluster/apps/media/jellyfin/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/jellyseerr/helm-release.yaml
+++ b/cluster/apps/media/jellyseerr/helm-release.yaml
@ -49,7 +49,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/kavita/helm-release.yaml
+++ b/cluster/apps/media/kavita/helm-release.yaml
@ -40,7 +40,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls
    persistence:
      config:
        enabled: true
--- a/cluster/apps/media/komga/helm-release.yaml
+++ b/cluster/apps/media/komga/helm-release.yaml
@ -46,7 +46,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/ombi/helm-release.yaml
+++ b/cluster/apps/media/ombi/helm-release.yaml
@ -45,7 +45,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/plex/helm-release.yaml
+++ b/cluster/apps/media/plex/helm-release.yaml
@ -57,7 +57,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/media/tautulli/helm-release.yaml
+++ b/cluster/apps/media/tautulli/helm-release.yaml
@ -47,7 +47,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/monitoring/grafana/helm-release.yaml
+++ b/cluster/apps/monitoring/grafana/helm-release.yaml
@ -26,7 +26,6 @@ spec:
      tls:
        - hosts:
            - *grafana-host
-          secretName: wildcard-main-tls

    grafana.ini:
      server:
--- a/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
+++ b/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
@ -31,7 +31,6 @@ spec:
        tls:
          - hosts:
              - *alertmanager-host
-            secretName: wildcard-main-tls

      alertmanagerSpec:
        alertmanagerConfiguration:
@ -57,7 +56,6 @@ spec:
        tls:
          - hosts:
              - *prometheus-host
-            secretName: wildcard-main-tls

      prometheusSpec:
        enableAdminAPI: false
--- a/cluster/apps/tools/gotify/helm-release.yaml
+++ b/cluster/apps/tools/gotify/helm-release.yaml
@ -46,7 +46,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      config:
--- a/cluster/apps/tools/hastebin/helm-release.yaml
+++ b/cluster/apps/tools/hastebin/helm-release.yaml
@ -60,7 +60,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    resources:
      requests:
--- a/cluster/apps/tools/transfersh/helm-release.yaml
+++ b/cluster/apps/tools/transfersh/helm-release.yaml
@ -57,7 +57,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    resources:
      requests:
--- a/cluster/apps/tools/vaultwarden/helm-release.yaml
+++ b/cluster/apps/tools/vaultwarden/helm-release.yaml
@ -43,7 +43,6 @@ spec:
        tls:
          - hosts:
              - *host
-            secretName: wildcard-main-tls

    persistence:
      data:
--- a/cluster/core/cert-manager/wildcard-cert.yaml
+++ b/cluster/core/cert-manager/wildcard-cert.yaml
@ -8,7 +8,7 @@ spec:

  secretTemplate:
    annotations:
-      replicator.v1.mittwald.de/replicate-to: "traefik,download,media,tools,management,authentik,database,monitoring"
+      replicator.v1.mittwald.de/replicate-to: "traefik"

  duration: 2160h # 90d
  renewBefore: 360h # 15d
--- a/cluster/core/networking/traefik/default-tls-store.yaml
+++ b/cluster/core/networking/traefik/default-tls-store.yaml
@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: default
+  namespace: traefik
+
+spec:
+  defaultCertificate:
+    secretName: wildcard-main-tls
--- a/cluster/core/networking/traefik/helm-release.yaml
+++ b/cluster/core/networking/traefik/helm-release.yaml
@ -79,7 +79,6 @@ spec:
    tlsStore:
      default:
        defaultCertificate:
-          secretName: wildcard-main-tls

    metrics:
      prometheus:
--- a/cluster/core/networking/traefik/kustomization.yaml
+++ b/cluster/core/networking/traefik/kustomization.yaml
@ -4,4 +4,5 @@ resources:
 - ./namespace.yaml
 - ./helm-repository.yaml
 - ./helm-release.yaml
+- ./default-tls-store.yaml
 - ./dashboard-ingress.yaml