ingress demo files

cert-ingress-config.md

@@ -0,0 +1,15 @@
+1. Setup Nginx Ingress controller
+
+```helm upgrade --install nginx-ingress stable/nginx-ingress```
+
+2. Setup Certificate Manger
+
+```helm upgrade --install cert-mgr stable/cert-manager```
+
+3. Setup Certificate Cluster Issuer
+
+```kubectl apply -f cluster-issuer-staging.yaml```
+
+4. Test configuration - Demo!
+
+```helm upgrade jenkins-ingress --install --namespace livedemo -f ./jenkins-values-demo.yaml stable/jenkins```

cluster-issuer-staging.yaml

@@ -0,0 +1,12 @@
+apiVersion: certmanager.k8s.io/v1alpha1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    email: jessde@microsoft.com
+    http01: {}
+    privateKeySecretRef:
+      key: ""
+      name: letsencrypt-staging
+    server: https://acme-staging-v02.api.letsencrypt.org/directory

jenkins-values-demo.yaml

@@ -0,0 +1,61 @@
+# Includes complete Jenkins configuration in order to run croc-hunter pipeline
+# To install on your own cluster, run:
+# helm --namespace jenkins --name jenkins -f ./jenkins-values.yaml install stable/jenkins
+
+Master:
+  ImageTag: "2.121.3"
+  resources:
+    requests:
+      cpu: "50m"
+      memory: "256Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2048Mi"
+  HostName: walkthrough.demo.az.jessicadeen.com
+  ServiceType: ClusterIP
+  ServicePort: 8080
+  InstallPlugins:
+      - kubernetes:1.12.4
+      - pipeline-stage-view:2.10
+      - pipeline-rest-api:2.10
+      - workflow-aggregator:2.5
+      - credentials-binding:1.16
+      - git:3.9.1
+      - pipeline-github-lib:1.0
+      - ghprb:1.42.0
+      - blueocean:1.8.2
+      - artifactory:2.16.2
+      - tfs:5.139.2
+
+  ScriptApproval:
+    - "method groovy.json.JsonSlurperClassic parseText java.lang.String"
+    - "new groovy.json.JsonSlurperClassic"
+    - "staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods leftShift java.util.Map java.util.Map"
+    - "staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods split java.lang.String"
+    - "method java.util.Collection toArray"
+    - "staticMethod org.kohsuke.groovy.sandbox.impl.Checker checkedCall java.lang.Object boolean boolean java.lang.String java.lang.Object[]"
+    - "staticMethod org.kohsuke.groovy.sandbox.impl.Checker checkedGetProperty java.lang.Object boolean boolean java.lang.Object"
+
+  Ingress:
+    ApiVersion: extensions/v1beta1
+    Annotations:
+      kubernetes.io/ingress.class: nginx
+      kubernetes.io/tls-acme: "true"
+      certmanager.k8s.io/cluster-issuer: letsencrypt-prod
+      ingress.kubernetes.io/secure-backends: "true"
+
+    TLS:
+      - secretName: walkthrough.demo.az.jessicadeen.com
+        hosts:
+          - walkthrough.demo.az.jessicadeen.com
+
+Agent:
+  Enabled: false
+
+rbac:
+  install: true
+  serviceAccountName: default
+  # RBAC api version (currently either v1beta1 or v1alpha1)
+  apiVersion: v1beta1
+  # Cluster role reference
+  roleRef: cluster-admin