Automate cert generation and renewal

kubernetes/ingress.yaml

@@ -3,6 +3,8 @@ kind: Ingress
 metadata:
   name: git-repo
   namespace: bioc-code-explorer
+  annotations:
+    cert-manager.io/issuer: letsencrypt
 spec:
   ingressClassName: "external-users"
   rules:
@@ -33,7 +35,7 @@ spec:
   tls:
   - hosts:
     - code.bioconductor.org
-  - secretName: certs
+    secretName: certs
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -42,6 +44,7 @@ metadata:
   namespace: bioc-code-explorer
   annotations:
     traefik.ingress.kubernetes.io/router.middlewares: "global-stripprefix@file"
+    cert-manager.io/issuer: letsencrypt
 spec:
   ingressClassName: "external-users"
   rules:
@@ -58,5 +61,5 @@ spec:
   tls:
   - hosts:
     - code.bioconductor.org
-  - secretName: certs
+    secretName: certs
 

kubernetes/issuer.yaml

@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt
+  namespace: bioc-code-explorer
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: [email protected]
+    privateKeySecretRef:
+      name: letsencrypt-account-key
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: external-users
+            serviceType: ClusterIP