New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for ingress nginx and certbot to ingress.yml #5613
Conversation
1965883
to
d273e88
Compare
@@ -87,6 +87,7 @@ script/dev:db:downgrade) shift; exec yarn run dev:db:downgrade "${@}";; | |||
script/dev:apply) shift; exec yarn run dev:apply "${@}";; | |||
script/dev:delete) shift; exec yarn run dev:delete "${@}";; | |||
script/dev:verify) shift; exec yarn run dev:verify "${@}";; | |||
script/dev:templates) shift; exec yarn run dev:templates "${@}";; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is to dump k8s templates with substituted variables into a file for debug purposes
@@ -111,14 +115,23 @@ const actions = [ | |||
provides: ['target-verify'], | |||
run: async (requirements, utils) => ({ | |||
'target-verify': await execCommand({ | |||
command: ['kubectl', 'apply', '--dry-run', '-f', '-'], | |||
command: ['kubectl', 'apply', '--dry-run=client', '-f', '-'], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is the preferred way now, old was deprecated
@@ -6,14 +6,24 @@ metadata: | |||
annotations: | |||
'kubernetes.io/ingress.global-static-ip-name': '{{ .Values.ingressStaticIpName }}' | |||
'ingress.gcp.kubernetes.io/pre-shared-cert': '{{ .Values.ingressCertName }}' | |||
'cert-manager.io/cluster-issuer': '{{ .Values.certManagerClusterIssuerName | default "" }}' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
those extra annotations will do no harm when left blank to any existing deployment.
Plus mozilla is overriding those for moz-specific deployments
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks great, many thanks Yarik!
@Eijebong Do you have anything to add?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got nothing to add, this looks good to me.
This introduces few changes:
ingress.yml
can be configured throughdev-config.yml
optioningressType: nginx
to generate proper routes (/
instead of/*
)ingress.yml
can include cert-manager annotations to provision certificates automaticallydev-deployment.yml
to include information on how to use those optionsFixes #4913