mirror of
https://github.com/morbalint/kemkas-deployment.git
synced 2026-07-17 22:03:46 +00:00
fix cert-manager pod2pod comms
This commit is contained in:
@@ -22,8 +22,9 @@ Setup instructions
|
|||||||
1. DO 1-click install argoCD into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
1. DO 1-click install argoCD into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
||||||
1. DO 1-click install ingress-nginx into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
1. DO 1-click install ingress-nginx into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
||||||
1. DO 1-click install cert-manager into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
1. DO 1-click install cert-manager into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same)
|
||||||
|
1. helm upgrade ingress-nginx to fix cert-manager pod2pod communication and enable proxy protocoll `helm upgrade ingress-nginx ingress-nginx/ingress-nginx --version 4.8.2 --namespace ingress-nginx --values ingress-nginx/values.yaml`
|
||||||
1. Create DNS A record for argocd.kemkas.hu pointing to the Load Balancer IP address (Load balancer is a DO object created with the ingress-nginx helm chart install)
|
1. Create DNS A record for argocd.kemkas.hu pointing to the Load Balancer IP address (Load balancer is a DO object created with the ingress-nginx helm chart install)
|
||||||
1. helm update argocd with `argocd-values.yaml`
|
1. helm update argocd with `helm upgrade argocd argo/argo-cd --version 4.9.4 --namespace argocd -f argocd-values.yaml`
|
||||||
1. Apply all files in `argocd` directory
|
1. Apply all files in `argocd` directory
|
||||||
```
|
```
|
||||||
kubectl apply -f cert-manager-issuer.yaml
|
kubectl apply -f cert-manager-issuer.yaml
|
||||||
|
|||||||
@@ -12,6 +12,8 @@ controller:
|
|||||||
service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: "true"
|
service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: "true"
|
||||||
# Specify whether the DigitalOcean Load Balancer should pass encrypted data to backend droplets
|
# Specify whether the DigitalOcean Load Balancer should pass encrypted data to backend droplets
|
||||||
service.beta.kubernetes.io/do-loadbalancer-tls-passthrough: "true"
|
service.beta.kubernetes.io/do-loadbalancer-tls-passthrough: "true"
|
||||||
|
# enable Pod-Pod communication through the Nginx Ingress load balancer: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes#step-5-enabling-pod-communication-through-the-load-balancer-optional
|
||||||
|
service.beta.kubernetes.io/do-loadbalancer-hostname: "workaround.dev.kemkas.hu"
|
||||||
|
|
||||||
# Will add custom configuration options to Nginx https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/
|
# Will add custom configuration options to Nginx https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/
|
||||||
config:
|
config:
|
||||||
|
|||||||
Reference in New Issue
Block a user