argocd-apps

Files

T

unkin-agent f37749523d Add *.main and *.ceph wildcard certificates for haproxy (#484 )

The haproxy edge terminates TLS for hosts under `main.unkin.net` and `ceph.unkin.net`, which the single `*.unkin.net` wildcard does not cover.

- Add cert-manager Certificates for both wildcards from the `letsencrypt` ClusterIssuer.
- Reflect the minted secrets into the `haproxy` namespace.

Needs these records in the public unkin.net zone first:
`_acme-challenge.main.unkin.net. CNAME _acme-challenge.main.acme.unkin.net.`
`_acme-challenge.ceph.unkin.net. CNAME _acme-challenge.ceph.acme.unkin.net.`

Reviewed-on: #484
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-09-26 16:38:31 +10:00

certificate_wildcard-ceph-unkin-net.yaml

Add *.main and *.ceph wildcard certificates for haproxy (#484 )

2026-09-26 16:38:31 +10:00

certificate_wildcard-main-unkin-net.yaml

Add *.main and *.ceph wildcard certificates for haproxy (#484 )

2026-09-26 16:38:31 +10:00

certificate_wildcard-unkin-net.yaml

Add *.main and *.ceph wildcard certificates for haproxy (#484 )

2026-09-26 16:38:31 +10:00

clusterissuer_letsencrypt-staging.yaml

Add cnameStrategy: Follow to ACME DNS-01 solvers (#331 )