fixed letsencrypt certificate authority

base/cert-manager/kustomization.yaml

@@ -1,7 +1,7 @@
 ---
-# namespace: cert-manager
 resources:
   - namespace.yaml
+  - letsencrypt.yaml
 helmCharts:
   - name: cert-manager
     version: v1.10.1

base/cert-manager/letsencrypt.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-http
+spec:
+  acme:
+    email: hostmaster@fabcity-hamburg.de
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-key
+    solvers:
+      - http01:
+          ingress:
+            class: nginx
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-http-staging
+spec:
+  acme:
+    email: hostmaster@fabcity-hamburg.de
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-key-staging
+    solvers:
+      - http01:
+          ingress:
+            class: nginx

overlays/dev/cert-manager/kustomization.yaml

@@ -1,4 +0,0 @@
----
-namespace: cert-manager
-resources:
-  - letsencrypt.yaml

overlays/dev/cert-manager/letsencrypt.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    email: hostmaster@fabcity-hamburg.de
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
-    privateKeySecretRef:
-      name: letsencrypt-key
-    solvers:
-      - http01:
-          ingress:
-            class: nginx

overlays/prod/cert-manager/kustomization.yaml

@@ -1,4 +0,0 @@
----
-namespace: cert-manager
-resources:
-  - letsencrypt.yaml

overlays/prod/cert-manager/letsencrypt.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    email: hostmaster@fabcity-hamburg.de
-    server: https://acme-v02.api.letsencrypt.org/directory
-    privateKeySecretRef:
-      name: letsencrypt-key
-    solvers:
-      - http01:
-          ingress:
-            class: nginx

overlays/prod/interfacer-webpresence/ingress.yaml

@@ -8,7 +8,8 @@ metadata:
     cert-manager.io/cluster-issuer: letsencrypt-http
 spec:
   rules:
-    - http:
+    - host: www.k8s.dev.fabcity-hamburg.de
+      http:
         paths:
           - path: /
             pathType: Prefix

overlays/prod/kustomization.yaml

@@ -2,5 +2,4 @@
 resources:
   - ../../base
   - ../../apps
-  - cert-manager
   - interfacer-webpresence