From 44d2d1b2e82ec53faca2a51d240bc3411c0f2d36 Mon Sep 17 00:00:00 2001 From: Arnaud Meukam Date: Fri, 16 Apr 2021 23:42:30 +0200 Subject: [PATCH] Switch to ManagedCertificate for Triage-Party. Use a Google-managed SSL certificate through `ManagedCertificate` for Triage-Party. Signed-off-by: Arnaud Meukam --- triage-party/release-team/certificate.yaml | 13 +++---------- triage-party/release-team/ingress.yaml | 5 +++-- 2 files changed, 6 insertions(+), 12 deletions(-) diff --git a/triage-party/release-team/certificate.yaml b/triage-party/release-team/certificate.yaml index 2f4cf6c78cb..df767b076e4 100644 --- a/triage-party/release-team/certificate.yaml +++ b/triage-party/release-team/certificate.yaml @@ -1,15 +1,8 @@ -apiVersion: cert-manager.io/v1alpha2 -kind: Certificate +apiVersion: networking.gke.io/v1 +kind: ManagedCertificate metadata: name: release-triage-k8s-io namespace: triageparty-release - annotations: - acme.cert-manager.io/http01-override-ingress-name: "triage-party-release" - cert-manager.io/issue-temporary-certificate: "true" spec: - secretName: release-triage-k8s-io-tls - issuerRef: - kind: ClusterIssuer - name: letsencrypt-prod - dnsNames: + domains: - release.triage.k8s.io diff --git a/triage-party/release-team/ingress.yaml b/triage-party/release-team/ingress.yaml index a7236f4122e..c845d9f125b 100644 --- a/triage-party/release-team/ingress.yaml +++ b/triage-party/release-team/ingress.yaml @@ -4,12 +4,13 @@ metadata: name: triage-party-release namespace: triageparty-release annotations: + kubernetes.io/ingress.allow-http: "false" + kubernetes.io/ingress.class: "gce" kubernetes.io/ingress.global-static-ip-name: "triage-party-release-ingress-prod" + networking.gke.io/managed-certificates: "release-triage-k8s-io" labels: app: triage-party spec: backend: serviceName: triage-party-release servicePort: 8080 - tls: - - secretName : release-triage-k8s-io-tls