Start repo reorganization with cert-manager

2025-02-15 03:36:52 +01:00
parent 9dc3eeb57f
commit e9d54563d6
13 changed files with 73 additions and 45 deletions
--- a/infrastructure/configs/certificates.yaml
+++ b/infrastructure/configs/certificates.yaml
@@ -1,29 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: huizinga-dev
-  namespace: default
-spec:
-  secretName: huizinga-dev-tls
-  issuerRef:
-    name: letsencrypt
-    kind: ClusterIssuer
-  commonName: "huizinga.dev"
-  dnsNames:
-    - "huizinga.dev"
-    - "*.huizinga.dev"
---
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: staging-huizinga-dev
-  namespace: default
-spec:
-  secretName: staging-huizinga-dev-tls
-  issuerRef:
-    name: letsencrypt
-    kind: ClusterIssuer
-  commonName: "staging.huizinga.dev"
-  dnsNames:
-    - "staging.huizinga.dev"
-    - "*.staging.huizinga.dev"
--- a/infrastructure/configs/cluster-issuers.yaml
+++ b/infrastructure/configs/cluster-issuers.yaml
@@ -1,17 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
-    email: tim.huizinga@gmail.com
-    privateKeySecretRef:
-      name: letsencrypt
-    solvers:
-      - dns01:
-          cloudflare:
-            email: tim.huizinga@gmail.com
-            apiTokenSecretRef:
-              name: cloudflare-token-secret
-              key: cloudflare-token
--- a/infrastructure/configs/kustomization.yaml
+++ b/infrastructure/configs/kustomization.yaml
@@ -1,9 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./secrets/
-  - ./cluster-issuers.yaml
-  - ./certificates.yaml
  - ./middleware.yaml

  - ./intel-devices
--- a/infrastructure/configs/secrets/cloudflare-token.yaml
+++ b/infrastructure/configs/secrets/cloudflare-token.yaml
@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: cloudflare-token-secret
-    namespace: cert-manager
-type: Opaque
-stringData:
-    cloudflare-token: ENC[AES256_GCM,data:XwRjEs7wysONEQ2CdcG4jN01PswOquzabIbxJwjIzg3mMpwKDGMJMQ==,iv:MOyiJICBgbvjiewagftS2OzI+ZTlJVQKORhRwGG/dbc=,tag:Ud3y9VquIVcuZzFaRHKFAA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2024-11-18T23:02:45Z"
-    mac: ENC[AES256_GCM,data:m2dq9lwsF0VaPJkBwSgO0nsa0znOvueAfYaimne82DQRyp9eH9AyAqnD+rjSQhWUrLuVjS7i1zIfTyB3EyrmXGOFlD2Win9lTiyRbhKlc5VtBBwBpC8TBVsyHngYROXJwJS9lLheEsMwJM70E4v0PpnfZX2OLuiK+kKaNnUtRbU=,iv:8LtaHSMODQ0C33hJM+3yL7mtOYdk5+w42PHM4c5X/ms=,tag:CXI8kD7SuZeB2igbhO1E0g==,type:str]
-    pgp:
-        - created_at: "2024-09-26T22:20:01Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7pKPTYH5bqOARAAl2y4yZJGsWORJ5jd2CopSW6yx8IsHqLKq3khYxHkPamu
-            gjItOM/Gqep1QCJr4kxTkO7P0MaYi7ZGinuhishYu4xy1mom8WzJs/rA2cjW1UbF
-            m8GoUGypaPtSsR1nQufgrO6JbIch3Tr498wBD7SvXIWTFpooalcERvVB3F4T4CeT
-            gXIk+vSjvXkCmx4jgAVhpj249HQOk9nyX35UzcjaSOzYm9/vfs3vFRq8FXNRkGff
-            +Ui/os4xTB4GiLgnvQ7t8FYTqvDfMVwgKI6VkOplpnP50mmTdKYRVe79Awvq1+/V
-            UkkSHxmw5Zqj7nv8MoKIlYk2g+14NLz57i4zs2vK3cNqDAqezub7r/LRDcm5Haqp
-            ZmI8B6VUNhveI7hKjm8ssMlOz6x3s7hvex6e+AWRqvbknusXXCiI9dhL73TXXmeZ
-            yceIlg5T67PY2ysbpfuToyg6ihbkMo0bM1m/lQpA94yRx6EKO75AHvBaGxgDggSr
-            Q8/DM3J729yqjHvXLL+2YGXVlRSpMlWb+AYi4YLmB/rsT2wBlPWE7m0c3/xQA3ld
-            5b/CW/2JOfXlwnooXEMFICr9ExFeiOv4RTnNahOTVscnIsi5jSlYPkhWwKm6ughy
-            oahJRi6wb6sJrleoPKRea+Pwh2qdEaQE/nFeBZeMMZxyLySQmkWoXJET7HQR3szU
-            aAEJAhBFZF84NkBuqmo+A7z055hz1tEJSnjO6eZ/+jvX9pPkrAv/CqW9C8UeG3vt
-            a6/XjnRVr38ZKAtNt3ebFwjzKZDLVyrANycnEp1PV7Pc8QvltJ88VS/wmWSP9Hj0
-            BA11vpb7XvkU
-            =XmSy
-            -----END PGP MESSAGE-----
-          fp: 1E0CF38FF7C9ADAED58B436ABA4A3D3607E5BA8E
-        - created_at: "2024-09-26T22:20:01Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA51kG++kLewoAQ/+M1BLbAVU8kVgx/atZnWwjZtjukEc8vOFw4n9tscq0Dm3
-            UzoOpbM1kaq5Hq8+e1mVFXMWLYgHnKjeSwBSiRCmZgFfvzPK63E5c6ZorKniTneZ
-            T7BJwxmtEF8JG+N9O2SHmto4cWZcrHvmWS5jJ5ybUFlMiFp6z7fPBuOzhKvTMBsc
-            IFHBBF0eMANUGwlpXuYJMTUECnFjvIxu/UXPMVBZ1HWHbIewYTRWXPQXeDxlJyk6
-            YgtGChBZ8KRYNqX1kBi5AyIdjWA9+wrMtTVTghC+1eBTOm8TsmN280KBmB512li1
-            HgexbmQkgItlJwyOV/7MTo19yzve72yYlqoIv3BSrwYfr0NDaQM0mhLAwcHC2R1R
-            IAOzajlHtgbr3XBW0BxWMC4Ch23CatZE4WJlu/CJ07+aMCsSV4L+da7wopt0A9dx
-            og0aPjUGq3MFmSet0kJKLJHS1JBSjf0LVnQjB5A451Wmndpoc2gZSpNtM4I2e2+7
-            xe6RUB6oYjRyB0t771UMQ3sQrSN3cn2c8yuijLep837yvNqpRBR4bbc2XJdZIOMw
-            sKEGIAMyJjCagQJa4c2YY0fksVSnhnYzjklfsx+PAvsW9EiWo26Vldp4zHYsVALD
-            7yKAWGupRTTB2mTXg9wvoKRkOY8A3Lb9aG+xnrf967nJt9nCV9hPXs959dVw9+jS
-            XgFCzdWtznuFA5wPJA3ko6lqLnE1HCIdgAo5ovQ4y3K9jkoVJsS2ADAnEy9Ac2uk
-            uds32S29PQ9o+ReAIQKvTzFNmKSLbcsK/z6rGLh0WdqmqWg6kVidWvktDQHY86E=
-            =cW8j
-            -----END PGP MESSAGE-----
-          fp: 49F10679C425233EFB4B1B6F9D641BEFA42DEC28
-    encrypted_regex: ^(data|stringData)$
-    version: 3.9.0
--- a/infrastructure/configs/secrets/kustomization.yaml
+++ b/infrastructure/configs/secrets/kustomization.yaml
@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - cloudflare-token.yaml