From d30eb482644cb0e3d718a10eff00a7057a5fe487 Mon Sep 17 00:00:00 2001 From: "azykov@mail.ru" Date: Sat, 18 Jul 2026 23:46:38 +0300 Subject: [PATCH] cert-manager-issuers --- clusters/base/apps/vaultwarden/secret.enc.yaml | 18 +++++++++--------- .../cert-manager-issuers/kustomization.yaml | 4 ++++ .../cert-manager-issuers/letsencrypt-prod.yaml | 16 ++++++++++++++++ clusters/home/apps.yaml | 7 +++++-- clusters/home/infra-apps.yaml | 16 ++++++++++++++++ clusters/home/infra-apps/kustomization.yaml | 4 ++++ .../home/{infrastructure.yaml => infra.yaml} | 7 +++++-- clusters/home/infra/kustomization.yaml | 3 +++ clusters/home/kustomization.yaml | 4 ++-- 9 files changed, 64 insertions(+), 15 deletions(-) create mode 100644 clusters/base/infra-apps/cert-manager-issuers/kustomization.yaml create mode 100644 clusters/base/infra-apps/cert-manager-issuers/letsencrypt-prod.yaml create mode 100644 clusters/home/infra-apps.yaml create mode 100644 clusters/home/infra-apps/kustomization.yaml rename clusters/home/{infrastructure.yaml => infra.yaml} (67%) create mode 100644 clusters/home/infra/kustomization.yaml diff --git a/clusters/base/apps/vaultwarden/secret.enc.yaml b/clusters/base/apps/vaultwarden/secret.enc.yaml index 3e1ee35..b8e7fbd 100644 --- a/clusters/base/apps/vaultwarden/secret.enc.yaml +++ b/clusters/base/apps/vaultwarden/secret.enc.yaml @@ -4,20 +4,20 @@ metadata: name: vaultwarden-secrets namespace: vaultwarden stringData: - #ENC[AES256_GCM,data:W5EyfACtGs9eoWsTiPFuWHKYgsafjW7RB5UnrWx08HiNosxUvnjj9nwuNH4FCTQvEH0ozH1MkrcB,iv:E3JPmxdtypvICkklLUlwJaGuEHNIZg1WH2TMLgmYhjU=,tag:qosaGqzTKy82W4+PoY7P4Q==,type:comment] - ADMIN_TOKEN: ENC[AES256_GCM,data:2B4IxwEPF7iQOo837uQ0ZKiPwp3ZufXUiQ2IO5j5S1yRBWQo+SFj4lS1l89/VFEmS7NdHQcvlabOgnzaL2LshKx0cQVAlHk9OUALnjJFhD73rmditlUWDK+xnAnCZ4j3E9p5rCPYqQCbox86Yn+5i6UccE/29A==,iv:02FH5ioq16ZQ7inigTCvP0h3WmqFcHK1HswRkdovGlI=,tag:IGRmkwCPFA+rqfx0LseLiQ==,type:str] + #ENC[AES256_GCM,data:k/BGGUN1tN7g4ljzMA9YOk2NyXzOhH9zqPrI1LuZof6bANpAoYUtFShs8vzN7akwySaWOsT/JCpG,iv:rDwKpQZiJUBMKJ1j7rcPk6oBFgrmRHUcPUcGZ4UpqDc=,tag:0vXY3/UnzQZKwk93Y5K6lQ==,type:comment] + ADMIN_TOKEN: ENC[AES256_GCM,data:fg2N86KymW8eq9zcXBQoVwkg8xjAy2X4JEW7RrEfota4RroiXuGOltY19+H9ev2Q7Fyg0qADnLgexF3tLQ1Gd1AuFMOPSr5PuipgLTO4kyd0KFK/pyAWirtFMKDBUIx1E+YqYRwQyZT310msQeBDbT5QxugKJQ==,iv:s7gEsqxp187M9g27qrqSt1YxpL5IFUU+iH7O5GLjgP8=,tag:RpXseIGqe5yMFAmKpKIpDw==,type:str] sops: age: - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZmxkbTFHTEo2MnVlTFVh - QkVabkRQQncvUVg2TUlCMnZxVlFVUVpaVnprCkZEckR6d2Fua2dMbHQwUlQzUSs2 - bWRJa2R0U2xEZXBRNGNlTWlTUEdudncKLS0tIHdTY3IxVWpySWN5RExiTGlEVEd5 - NGNyWVo1dkxMaGplaUppcUZDOTNTY2MKegiSllUBePt+4lzL15AEJ1NMj9VmvH+9 - EuWICGehLYcBw7SNftpPmJhrNK/HAYdLV+SPg6Qfzwh9cZtYp0Y1Ww== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdEZQQXdWNzhmTW1odExm + NDJPUFlvVWxDWVNaUk0rcm82b3lZUTZRNkcwCitmYlpGUGpqMG8zUDdJUWlHeFpJ + Q3dGQm1CMXlrdjFvMjRMTzBDWDdIeG8KLS0tIGFjODJiNm5WZlJ6ODVjS2JYZVpW + b0lCbWt0M0laRndTbDhiM1V0ZWY0eVUKeWOxbcYuYbi8Le/+iZGOEwNNIrzFENfp + bVSP7YIYrellC1a6XwTSke86fx45smRir6vJq7yQdoRhavLfgDFamg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-26T10:17:30Z" - mac: ENC[AES256_GCM,data:nmPeyQbJexYyrIdx7htBXR8t2K7VEY4q2nqCRaYMz6OAg4L+7kkyFBPB2mYZ7w4FLJJoTGtFrtC0RSNCdKm7inUOaQjgCbJNoY6BD9xuOj5gJQ6DwliwOz7m1NjBwMt9jNFgXAw5jhX3l5GYBbbnE9htji0xOnWvVGKQ8/dNsGM=,iv:tWMYlI4n7gT19LGck+Y//xCCrCd18LSIUQTyi0ghb6E=,tag:7H5uTGClqDuTuVqmR7onXw==,type:str] + lastmodified: "2026-08-26T10:17:32Z" + mac: ENC[AES256_GCM,data:PmOCWfMICuBoX3joX/l1IFXzHEjDjB0K5qabv9SQwXjzk4Tv98w+8o3uQLEda6Z0396+XPIzkSQpiENWOLbZADt9NKN1To1R0Mu26Pf6GI+mgpiMjxXAdHthzUNUZUfiZak1py7vbQUzwcPt6onysKHDtKpW5RzsES6plQUUxJU=,iv:fO93ewwN3u7+39IKLQPfvKvjbNiVDbyJoOyidOBQ4JU=,tag:jlB5M70mWMV7PF2Av4w9qg==,type:str] encrypted_regex: ^(data|stringData)$ version: 3.11.0 diff --git a/clusters/base/infra-apps/cert-manager-issuers/kustomization.yaml b/clusters/base/infra-apps/cert-manager-issuers/kustomization.yaml new file mode 100644 index 0000000..766be60 --- /dev/null +++ b/clusters/base/infra-apps/cert-manager-issuers/kustomization.yaml @@ -0,0 +1,4 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - letsencrypt-prod.yaml diff --git a/clusters/base/infra-apps/cert-manager-issuers/letsencrypt-prod.yaml b/clusters/base/infra-apps/cert-manager-issuers/letsencrypt-prod.yaml new file mode 100644 index 0000000..40e1a4d --- /dev/null +++ b/clusters/base/infra-apps/cert-manager-issuers/letsencrypt-prod.yaml @@ -0,0 +1,16 @@ +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: letsencrypt-prod +spec: + acme: + # server: https://acme-v02.api.letsencrypt.org/directory + server: https://acme-staging-v02.api.letsencrypt.org/directory + email: admin@aggtaa.com + privateKeySecretRef: + name: letsencrypt-prod-account-key + solvers: + - http01: + ingress: + ingressClassName: traefik + \ No newline at end of file diff --git a/clusters/home/apps.yaml b/clusters/home/apps.yaml index e97ffb2..a8a5dbf 100644 --- a/clusters/home/apps.yaml +++ b/clusters/home/apps.yaml @@ -4,10 +4,13 @@ metadata: name: apps namespace: flux-system spec: - interval: 10m + interval: 1m sourceRef: kind: GitRepository name: flux-system path: ./clusters/home/apps prune: true - wait: true \ No newline at end of file + wait: true + dependsOn: + - name: namespaces + - name: infra-apps \ No newline at end of file diff --git a/clusters/home/infra-apps.yaml b/clusters/home/infra-apps.yaml new file mode 100644 index 0000000..3102308 --- /dev/null +++ b/clusters/home/infra-apps.yaml @@ -0,0 +1,16 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: infra-apps + namespace: flux-system +spec: + interval: 1m + sourceRef: + kind: GitRepository + name: flux-system + path: ./clusters/home/infra-apps + prune: true + wait: true + dependsOn: + - name: namespaces + - name: infra \ No newline at end of file diff --git a/clusters/home/infra-apps/kustomization.yaml b/clusters/home/infra-apps/kustomization.yaml new file mode 100644 index 0000000..8cc5c12 --- /dev/null +++ b/clusters/home/infra-apps/kustomization.yaml @@ -0,0 +1,4 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../../base/infra-apps/cert-manager-issuers diff --git a/clusters/home/infrastructure.yaml b/clusters/home/infra.yaml similarity index 67% rename from clusters/home/infrastructure.yaml rename to clusters/home/infra.yaml index 03b1def..aec3cfc 100644 --- a/clusters/home/infrastructure.yaml +++ b/clusters/home/infra.yaml @@ -1,12 +1,15 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1 kind: Kustomization metadata: - name: infrastructure + name: infra namespace: flux-system spec: interval: 1m sourceRef: kind: GitRepository name: flux-system - path: ./clusters/home/infrastructure + path: ./clusters/home/infra prune: true + wait: true + dependsOn: + - name: namespaces diff --git a/clusters/home/infra/kustomization.yaml b/clusters/home/infra/kustomization.yaml new file mode 100644 index 0000000..b83b23e --- /dev/null +++ b/clusters/home/infra/kustomization.yaml @@ -0,0 +1,3 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: [] diff --git a/clusters/home/kustomization.yaml b/clusters/home/kustomization.yaml index 4146d01..7feb2d8 100644 --- a/clusters/home/kustomization.yaml +++ b/clusters/home/kustomization.yaml @@ -3,7 +3,7 @@ kind: Kustomization resources: - flux-system - namespaces.yaml - # - infra.yaml + - infra.yaml # - infra-nodes.yaml - # - infra-apps.yaml + - infra-apps.yaml - apps.yaml