optinal ssl

charts/t-clo-902/Chart.yaml

@@ -3,20 +3,23 @@ name: t-clo-902
 description: A Helm chart to sell cats on Kubernetes
 type: application
 
-version: 0.70.0
+version: 0.72.0
 
 appVersion: "1.1.0"
 
 dependencies:
-  # - name: ingress-nginx
-  #   version: 4.7.0
-  #   repository: https://kubernetes.github.io/ingress-nginx
+  - name: ingress-nginx
+    version: 4.7.0
+    repository: https://kubernetes.github.io/ingress-nginx
   - name: mysql
     version: 9.10.2
     repository: https://charts.bitnami.com/bitnami
   - name: rabbitmq
     version: 12.0.0
     repository: https://charts.bitnami.com/bitnami
+  - name: cert-manager
+    version: 1.12.1
+    repository: https://charts.jetstack.io
   - name: eck-operator
     version: 2.8.0
     repository: https://helm.elastic.co

charts/t-clo-902/templates/certificate.yaml

@@ -0,0 +1,13 @@
+{{- $releaseName := (printf .Release.Name) }}
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ .Release.Name }}-cert 
+  namespace: default
+spec:
+  dnsNames:
+    - psdc.tech 
+  secretName: kubi-tls
+  issuerRef:
+    name: {{ .Release.Name }}-letsencrypt-staging
+    kind: ClusterIssuer

charts/t-clo-902/templates/ingress.yaml

@@ -4,6 +4,10 @@ kind: Ingress
 metadata:
   annotations:
     kubernetes.io/ingress.class: nginx
+    # nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    # nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
+    # cert-manager.io/cluster-issuer: {{ .Release.Name }}-letsencrypt-staging
+    # certmanager.k8s.io/acme-challenge-type: http01
   name: {{ .Release.Name }}-ingress
   namespace: default
 spec:

charts/t-clo-902/templates/issuer.yaml

@@ -0,0 +1,36 @@
+{{- $releaseName := (printf .Release.Name) }}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ .Release.Name }}-letsencrypt-staging
+  annotations:
+    kubernetes.io/ingress.class: nginx
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: [email protected]
+    privateKeySecretRef:
+      name: letsencrypt-staging-key
+    solvers:
+    - http01:
+        ingress:
+          class: nginx
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ .Release.Name }}-letsencrypt-prod
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: [email protected]
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-prod-issuer
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            class: nginxa

charts/t-clo-902/values.yaml

@@ -15,7 +15,7 @@ global:
     auth:
       username: kubi
       password: password
-      rootPassword: tamer
+      rootPassword: rootPassword
       database: kubi
       connection: mysql
 
@@ -36,7 +36,7 @@ mysql:
     createDatabase: true
     username: kubi
     password: password
-    rootPassword: tamer
+    rootPassword: rootPassword
     database: kubi
     connection: mysql
 
@@ -64,7 +64,7 @@ dockerImageCredentials:
   registry: https://ghcr.io
   username: user
   email: email
-  accessToken: aeae
+  accessToken: ""
 
 front:
   replicas: 3

terraform/main.tf

@@ -27,6 +27,7 @@ resource "ovh_cloud_project_kube_nodepool" "node_pool" {
   kube_id       = ovh_cloud_project_kube.my_kube_cluster.id
   name          = "my-pool" 
   flavor_name   = "b2-7"
+  autoscale     = true
   desired_nodes = 3
   max_nodes     = 3
   min_nodes     = 3