Skip to content

Commit 8f21ee4

Browse files
f0sself0ssel
committed
eu
1 parent a847533 commit 8f21ee4

File tree

3 files changed

+374
-91
lines changed

3 files changed

+374
-91
lines changed

‎scaletest/terraform/new/k8s_certmanager.tf

Lines changed: 60 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -1,65 +1,68 @@
1-
locals {
2-
cert_manager_namespace = "cert-manager"
3-
cert_manager_helm_repo = "https://charts.jetstack.io"
4-
cert_manager_helm_chart = "cert-manager"
5-
cert_manager_release_name = "cert-manager"
6-
cert_manager_chart_version = "1.12.2"
7-
cloudflare_issuer_private_key_secret_name = "cloudflare-issuer-private-key"
8-
}
1+
# locals {
2+
# cert_manager_namespace = "cert-manager"
3+
# cert_manager_helm_repo = "https://charts.jetstack.io"
4+
# cert_manager_helm_chart = "cert-manager"
5+
# cert_manager_release_name = "cert-manager"
6+
# cert_manager_chart_version = "1.16.2"
7+
# cloudflare_issuer_private_key_secret_name = "cloudflare-issuer-private-key"
8+
# }
99

10-
resource "kubernetes_secret" "cloudflare-api-key" {
11-
provider = kubernetes.primary
10+
# resource "kubernetes_secret" "cloudflare-api-key" {
11+
# provider = kubernetes.primary
1212

13-
metadata {
14-
name = "cloudflare-api-key-secret"
15-
namespace = local.cert_manager_namespace
16-
}
17-
data = {
18-
api-token = var.cloudflare_api_token
19-
}
20-
}
13+
# metadata {
14+
# name = "cloudflare-api-key-secret"
15+
# namespace = local.cert_manager_namespace
16+
# }
17+
# data = {
18+
# api-token = var.cloudflare_api_token
19+
# }
20+
# }
2121

22-
resource "kubernetes_namespace" "cert-manager-namespace" {
23-
provider = kubernetes.primary
22+
# resource "kubernetes_namespace" "cert-manager-namespace" {
23+
# provider = kubernetes.primary
2424

25-
metadata {
26-
name = local.cert_manager_namespace
27-
}
28-
}
25+
# metadata {
26+
# name = local.cert_manager_namespace
27+
# }
28+
# }
2929

30-
resource "helm_release" "cert-manager" {
31-
provider = helm.primary
30+
# resource "helm_release" "cert-manager" {
31+
# provider = helm.primary
3232

33-
repository = local.cert_manager_helm_repo
34-
chart = local.cert_manager_helm_chart
35-
name = local.cert_manager_release_name
36-
namespace = kubernetes_namespace.cert-manager-namespace.metadata.0.name
37-
values = [<<EOF
38-
installCRDs: true
39-
EOF
40-
]
41-
}
33+
# repository = local.cert_manager_helm_repo
34+
# chart = local.cert_manager_helm_chart
35+
# name = local.cert_manager_release_name
36+
# namespace = kubernetes_namespace.cert-manager-namespace.metadata.0.name
37+
# values = [<<EOF
38+
# installCRDs: true
39+
# webhook:
40+
# securePort: 10250
41+
# EOF
42+
# ]
43+
# }
4244

43-
resource "kubectl_manifest" "cloudflare-cluster-issuer" {
44-
provider = kubectl.primary
45+
# resource "kubectl_manifest" "cloudflare-issuer" {
46+
# provider = kubectl.primary
4547

46-
depends_on = [ helm_release.cert-manager ]
47-
yaml_body = <<YAML
48-
apiVersion: cert-manager.io/v1
49-
kind: ClusterIssuer
50-
metadata:
51-
name: cloudflare-issuer
52-
spec:
53-
acme:
54-
email: ${var.cloudflare_email}
55-
server: https://acme-staging-v02.api.letsencrypt.org/directory
56-
privateKeySecretRef:
57-
name: ${local.cloudflare_issuer_private_key_secret_name}
58-
solvers:
59-
- dns01:
60-
cloudflare:
61-
apiTokenSecretRef:
62-
name: ${kubernetes_secret.cloudflare-api-key.metadata.0.name}
63-
key: api-token
64-
YAML
65-
}
48+
# depends_on = [ helm_release.cert-manager ]
49+
# yaml_body = <<YAML
50+
# apiVersion: cert-manager.io/v1
51+
# kind: Issuer
52+
# metadata:
53+
# name: cloudflare-issuer
54+
# namespace: ${kubernetes_namespace.cert-manager-namespace.metadata.0.name}
55+
# spec:
56+
# acme:
57+
# email: ${var.cloudflare_email}
58+
# server: https://acme-staging-v02.api.letsencrypt.org/directory
59+
# privateKeySecretRef:
60+
# name: ${local.cloudflare_issuer_private_key_secret_name}
61+
# solvers:
62+
# - dns01:
63+
# cloudflare:
64+
# apiTokenSecretRef:
65+
# name: ${kubernetes_secret.cloudflare-api-key.metadata.0.name}
66+
# key: api-token
67+
# YAML
68+
# }

0 commit comments

Comments
 (0)