This commit is contained in:
Nico Schottelius 2021-06-10 00:02:16 +02:00
parent 1cf1143eb9
commit 5867cc8baf
2 changed files with 45 additions and 0 deletions

View File

@ -10,10 +10,23 @@ name.
* The certifcatce for xyz.example.com is requested/stored * The certifcatce for xyz.example.com is requested/stored
* All pods get access to the certificate, serve https * All pods get access to the certificate, serve https
## Certificate for a service [sketch]
* Have one pod listening on port 80 / doing certbot from time to time
* The cert is stored as a configmap (?) or other volume
* The application containers read the certificate
* ... and are restarted on ... ??
* Job+Cronjob could do the job
* Deletion of certificate?
* With the volume/configmap
* Port 80 of the IP nginx with certbot webroot
* webroot shared with certbot container
## DNS ## DNS
* Could try to reuse existing CoreDNS * Could try to reuse existing CoreDNS
** Maybe even via https://coredns.io/plugins/kubernetes/
## Letsencrypt / Certificates for services [WIP] ## Letsencrypt / Certificates for services [WIP]

View File

@ -0,0 +1,32 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginxssl
spec:
selector:
matchLabels:
app: nginxssl
replicas: 1
template:
metadata:
labels:
app: nginxssl
spec:
containers:
- name: nginx
image: nginx:1.20.0-alpine
ports:
- containerPort: 443
---
apiVersion: v1
kind: Service
metadata:
name: etherpad
labels:
app: etherpadsooooolite
spec:
type: ClusterIP
ports:
- port: 80
selector:
app: etherpadsooooolite