generated from oracle-devrel/repo-template
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #80 from mgueury/main
NoSQL + K8s CertManager/External DNS
- Loading branch information
Showing
71 changed files
with
1,146 additions
and
1,202 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,47 @@ | ||
| # Use 2 Ingress since the parameter replacement work differently in NGINX for / and /app (see annotation) | ||
| apiVersion: networking.k8s.io/v1 | ||
| kind: Ingress | ||
| metadata: | ||
| name: ##PREFIX##-app-ingress | ||
| annotations: | ||
| {%- if language == "apex" %} | ||
| nginx.ingress.kubernetes.io/rewrite-target: /ords/r/apex_app/apex_app/$2 | ||
| nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" | ||
| nginx.ingress.kubernetes.io/upstream-vhost: "##ORDS_HOST##" | ||
| {%- elif language == "ords" %} | ||
| nginx.ingress.kubernetes.io/rewrite-target: /ords/starter/module/$2 | ||
| nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" | ||
| nginx.ingress.kubernetes.io/upstream-vhost: "##ORDS_HOST##" | ||
| {%- elif language == "java" and java_framework == "tomcat" %} | ||
| nginx.ingress.kubernetes.io/rewrite-target: /starter-1.0/$2 | ||
| {%- else %} | ||
| nginx.ingress.kubernetes.io/rewrite-target: /$2 | ||
| {%- endif %} | ||
| # nginx.ingress.kubernetes.io/affinity: "cookie" | ||
| # nginx.ingress.kubernetes.io/session-cookie-path: "/" | ||
| spec: | ||
| ingressClassName: nginx | ||
| {%- if tls == "new_http_01" %} | ||
| tls: | ||
| - hosts: | ||
| - ##DNS_NAME## | ||
| secretName: ##PREFIX##-tls-secret | ||
| rules: | ||
| - host: ##DNS_NAME## | ||
| http: | ||
| {%- else %} | ||
| rules: | ||
| - http: | ||
| {%- endif %} | ||
| paths: | ||
| - path: /##PREFIX##/app(/|$)(.*) | ||
| pathType: ImplementationSpecific | ||
| backend: | ||
| service: | ||
| name: ##PREFIX##-app-service | ||
| port: | ||
| {%- if language in [ "apex", "ords" ] %} | ||
| number: 443 | ||
| {%- else %} | ||
| number: 80 | ||
| {%- endif %} |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,39 @@ | ||
| apiVersion: networking.k8s.io/v1 | ||
| kind: Ingress | ||
| metadata: | ||
| name: ##PREFIX##-ui-ingress | ||
| annotations: | ||
| nginx.ingress.kubernetes.io/rewrite-target: /$2 | ||
| # nginx.ingress.kubernetes.io/affinity: "cookie" | ||
| # nginx.ingress.kubernetes.io/session-cookie-path: "/" | ||
| {%- if tls == "new_http_01" %} | ||
| cert-manager.io/issuer: "letsencrypt-prod" | ||
| # Logs: | ||
| # - kubectl get certificate | ||
| # - kubectl get certificaterequest | ||
| # - kubectl describe issuer letsencrypt-prod | ||
| external-dns.alpha.kubernetes.io/hostname: ##DNS_NAME## | ||
| # Logs: kubectl logs external-dns-xxxx | ||
| {%- endif %} | ||
| spec: | ||
| ingressClassName: nginx | ||
| {%- if tls == "new_http_01" %} | ||
| tls: | ||
| - hosts: | ||
| - ##DNS_NAME## | ||
| secretName: ##PREFIX##-tls-secret | ||
| rules: | ||
| - host: ##DNS_NAME## | ||
| http: | ||
| {%- else %} | ||
| rules: | ||
| - http: | ||
| {%- endif %} | ||
| paths: | ||
| - path: /##PREFIX##(/|$)(.*) | ||
| pathType: ImplementationSpecific | ||
| backend: | ||
| service: | ||
| name: ##PREFIX##-ui-service | ||
| port: | ||
| number: 80 |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Issuer | ||
| metadata: | ||
| name: letsencrypt-prod | ||
| spec: | ||
| acme: | ||
| # The ACME server URL | ||
| server: https://acme-v02.api.letsencrypt.org/directory | ||
| # Email address used for ACME registration | ||
| # XXXXX | ||
| email: ##CERTIFICATE_EMAIL## | ||
| # Name of a secret used to store the ACME account private key | ||
| privateKeySecretRef: | ||
| name: letsencrypt-prod | ||
| # Enable the HTTP-01 challenge provider | ||
| solvers: | ||
| - http01: | ||
| ingress: | ||
| class: nginx | ||
| # in 1.13 | ||
| # ingressClassName: nginx |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Issuer | ||
| metadata: | ||
| name: letsencrypt-staging | ||
| spec: | ||
| acme: | ||
| # The ACME server URL | ||
| server: https://acme-staging-v02.api.letsencrypt.org/directory | ||
| # Email address used for ACME registration | ||
| email: ##CERTIFICATE_EMAIL## | ||
| # Name of a secret used to store the ACME account private key | ||
| privateKeySecretRef: | ||
| name: letsencrypt-staging | ||
| # Enable the HTTP-01 challenge provider | ||
| solvers: | ||
| - http01: | ||
| ingress: | ||
| ingressClassName: nginx |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| auth: | ||
| region: ##REGION## | ||
| useWorkloadIdentity: true | ||
| compartment: ##COMPARMENT_OCID## | ||
|
|
Oops, something went wrong.