feat: use letsencrypt (#28)

android-project-46group · May 4, 2022 · 6765731 · 6765731
1 parent 897b230
commit 6765731
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/eks/ingress.yaml b/eks/ingress.yaml
@@ -9,6 +9,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: sakamichi-ingress
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
 spec:
   ingressClassName: nginx
   rules:
@@ -22,3 +24,7 @@ spec:
                 name: sakamichi-api-service
                 port:
                   number: 80
+  tls:
+    - hosts:
+        - "api.kokoichi.link"
+      secretName: sakamichi-api-cert
diff --git a/eks/issuer.yaml b/eks/issuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: [email protected]
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-account-private-key
+    solvers:
+      - http01:
+          ingress:
+            class: nginx