mrwho
0194a6fc0e
Replace manual TLS secret creation with cert-manager Certificate resources and automatic secret provisioning, enabling dynamic certificate issuance from Let's Encrypt while improving infrastructure reliability and reducing operational overhead.
35 lines
868 B
YAML
35 lines
868 B
YAML
---
|
|
# role defaults
|
|
uyuni_namespace: uyuni-server
|
|
uyuni_chart_version: 2026.6.0
|
|
uyuni_kubeconfig: "/home/{{ ansible_user }}/.kube/config"
|
|
uyuni_helm_values:
|
|
global.fqdn: uyuni.local.mrwho.ru
|
|
ingress.enabled: true
|
|
ingress.type: traefik
|
|
# ingress.annotations."cert-manager.io/cluster-issuer": "letsencrypt-prod"
|
|
uyuni_tls_cert: null
|
|
uyuni_tls_key: null
|
|
db_tls_cert: null
|
|
db_tls_key: null
|
|
uyuni_ca_cert: null
|
|
db_ca_cert: null
|
|
uyuni_create_certificates: true
|
|
uyuni_certificates:
|
|
- name: uyuni-ingress-cert
|
|
namespace: uyuni-server
|
|
secretName: uyuni-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
- name: uyuni-db-cert
|
|
namespace: uyuni-server
|
|
secretName: db-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|