mirror of
https://github.com/ChristianLempa/boilerplates.git
synced 2024-12-29 10:29:31 +01:00
79 lines
1.5 KiB
HCL
79 lines
1.5 KiB
HCL
resource "kubernetes_namespace" "certmanager" {
|
|
|
|
depends_on = [
|
|
time_sleep.wait_for_kubernetes
|
|
]
|
|
|
|
metadata {
|
|
name = "certmanager"
|
|
}
|
|
|
|
}
|
|
|
|
resource "helm_release" "certmanager" {
|
|
|
|
depends_on = [
|
|
kubernetes_namespace.certmanager
|
|
]
|
|
|
|
name = "certmanager"
|
|
namespace = "certmanager"
|
|
|
|
repository = "https://charts.jetstack.io"
|
|
chart = "cert-manager"
|
|
|
|
# Install Kubernetes CRDs
|
|
set {
|
|
name = "installCRDs"
|
|
value = "true"
|
|
}
|
|
}
|
|
|
|
resource "time_sleep" "wait_for_certmanager" {
|
|
|
|
depends_on = [
|
|
helm_release.certmanager
|
|
]
|
|
|
|
create_duration = "10s"
|
|
}
|
|
|
|
# Create a ClusterIssuer
|
|
|
|
resource "kubectl_manifest" "cloudflare_prod" {
|
|
|
|
depends_on = [
|
|
time_sleep.wait_for_certmanager
|
|
]
|
|
|
|
# TODO: add your mail address according to your configuration and API authentication settings!
|
|
# ---
|
|
yaml_body = <<YAML
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: cloudflare-prod
|
|
spec:
|
|
acme:
|
|
email: your-mail-address
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
privateKeySecretRef:
|
|
name: cloudflare-prod-account-key
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
email: your-mail-address
|
|
apiKeySecretRef:
|
|
name: cloudflare-api-key-secret
|
|
key: api-key
|
|
YAML
|
|
}
|
|
|
|
resource "time_sleep" "wait_for_clusterissuer" {
|
|
|
|
depends_on = [
|
|
kubectl_manifest.cloudflare_prod
|
|
]
|
|
|
|
create_duration = "30s"
|
|
} |