mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
Ruben Hensen
1f04831a97
ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces. immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver. Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.
24 lines
679 B
YAML
24 lines
679 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: argocd
|
|
|
|
|
|
# additional resources like the route, certificate and secrets.
|
|
resources:
|
|
- https://raw.githubusercontent.com/argoproj/argo-cd/refs/tags/v3.4.12/manifests/install.yaml
|
|
- certificate.yaml
|
|
- httproute.yaml
|
|
- oidc-secret.yaml
|
|
|
|
patches:
|
|
- target:
|
|
group: apps
|
|
version: v1
|
|
kind: ReplicaSet
|
|
name: argocd-notifications-controller
|
|
path: overlays/argocd-notifications-controller-patch.yaml
|
|
- path: overlays/argocd-cm.patch.yaml
|
|
- path: overlays/argocd-rbac-cm.patch.yaml
|
|
- path: overlays/argocd-cmd-params-cm.patch.yaml
|
|
- path: overlays/patched-ca-bundle.patch.yaml |