From 1836e01376c9be8c6b62d353bf402f3ab1c5ba76 Mon Sep 17 00:00:00 2001
From: morbalint <balint@morasz.hu>
Date: Thu, 11 Jan 2024 17:02:12 +0100
Subject: [PATCH] separate ingress for separate host

ingress worked, but SSL didn't :(
---
 kemkas/app.kemkas.hu-ingress.yaml         | 27 +++++++++++++++++++++++
 kemkas/app.kemkas.hu-ssl-cert-issuer.yaml | 20 +++++++++++++++++
 kemkas/kemkas-ingress.yaml                | 15 ++-----------
 kemkas/kemkas-ssl-cert-issuer.yaml        |  4 ++--
 4 files changed, 51 insertions(+), 15 deletions(-)
 create mode 100644 kemkas/app.kemkas.hu-ingress.yaml
 create mode 100644 kemkas/app.kemkas.hu-ssl-cert-issuer.yaml

diff --git a/kemkas/app.kemkas.hu-ingress.yaml b/kemkas/app.kemkas.hu-ingress.yaml
new file mode 100644
index 0000000..b163098
--- /dev/null
+++ b/kemkas/app.kemkas.hu-ingress.yaml
@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-kemkas
+  namespace: kemkas
+  annotations:
+    # nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    # nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    cert-manager.io/issuer: letsencrypt-app-kemkas-hu
+spec:
+  ingressClassName: nginx
+  rules:
+  - http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: kemkas-service
+            port:
+              number: 8080
+    host: app.kemkas.hu
+  tls:
+  - hosts:
+    - kemkas.hu
+    - app.kemkas.hu
+    secretName: letsencrypt-app-kemkas-hu
diff --git a/kemkas/app.kemkas.hu-ssl-cert-issuer.yaml b/kemkas/app.kemkas.hu-ssl-cert-issuer.yaml
new file mode 100644
index 0000000..b2cb8e2
--- /dev/null
+++ b/kemkas/app.kemkas.hu-ssl-cert-issuer.yaml
@@ -0,0 +1,20 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt-app-kemkas-hu
+  namespace: kemkas
+spec:
+  # ACME issuer configuration
+  # `email` - the email address to be associated with the ACME account (make sure it's a valid one)
+  # `server` - the URL used to access the ACME server’s directory endpoint
+  # `privateKeySecretRef` - Kubernetes Secret to store the automatically generated ACME account private key
+  acme:
+    email: developer@kemkas.hu
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-app-kemkas-hu-private-key
+    solvers:
+      # Use the HTTP-01 challenge provider
+      - http01:
+          ingress:
+            class: nginx
diff --git a/kemkas/kemkas-ingress.yaml b/kemkas/kemkas-ingress.yaml
index 2c7df65..f0748d5 100644
--- a/kemkas/kemkas-ingress.yaml
+++ b/kemkas/kemkas-ingress.yaml
@@ -6,7 +6,7 @@ metadata:
   annotations:
     # nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     # nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-    cert-manager.io/issuer: letsencrypt-kemkas-staging
+    cert-manager.io/issuer: letsencrypt-kemkas
 spec:
   ingressClassName: nginx
   rules:
@@ -20,18 +20,7 @@ spec:
             port:
               number: 8080
     host: kemkas.hu
-  - http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: kemkas-service
-            port:
-              number: 8080
-    host: app.kemkas.hu
   tls:
   - hosts:
     - kemkas.hu
-    - app.kemkas.hu
-    secretName: letsencrypt-kemkas-staging
+    secretName: letsencrypt-kemkas
diff --git a/kemkas/kemkas-ssl-cert-issuer.yaml b/kemkas/kemkas-ssl-cert-issuer.yaml
index fad8a49..428d339 100644
--- a/kemkas/kemkas-ssl-cert-issuer.yaml
+++ b/kemkas/kemkas-ssl-cert-issuer.yaml
@@ -1,7 +1,7 @@
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
-  name: letsencrypt-kemkas-staging
+  name: letsencrypt-kemkas
   namespace: kemkas
 spec:
   # ACME issuer configuration
@@ -12,7 +12,7 @@ spec:
     email: developer@kemkas.hu
     server: https://acme-v02.api.letsencrypt.org/directory
     privateKeySecretRef:
-      name: letsencrypt-kemkas-staging-private-key
+      name: letsencrypt-kemkas-private-key
     solvers:
       # Use the HTTP-01 challenge provider
       - http01: