From a6fa98315ac7e12a4e87459f1f2917b6990915d2 Mon Sep 17 00:00:00 2001 From: Smeagol Date: Wed, 27 Sep 2023 09:00:17 +0000 Subject: [PATCH 01/15] Update Helm release cert-manager to v1.13.1 --- kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml index e436f61..7888e2b 100644 --- a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml @@ -10,7 +10,7 @@ spec: chart: spec: chart: cert-manager - version: v1.12.3 + version: v1.13.1 sourceRef: kind: HelmRepository name: jetstack From 7cb2ea263d4f3cb9fdb68a5b1188c7ea6994b202 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Sun, 1 Oct 2023 19:12:11 -0500 Subject: [PATCH 02/15] Adding hetzner cloud controller manager for hetzner cloud load balancers. --- .../kube-system/hccm/app/externalsecret.yaml | 18 ++++++++++++++++ .../kube-system/hccm/app/helmrelease.yaml | 21 +++++++++++++++++++ .../kube-system/hccm/app/kustomization.yaml | 7 +++++++ kubernetes/apps/kube-system/hccm/ks.yaml | 16 ++++++++++++++ .../apps/kube-system/kustomization.yaml | 1 + .../metrics-server/app/kustomization.yaml | 1 + .../flux/repositories/helm/hetzner.yaml | 10 +++++++++ .../flux/repositories/helm/kustomization.yaml | 2 ++ 8 files changed, 76 insertions(+) create mode 100644 kubernetes/apps/kube-system/hccm/app/externalsecret.yaml create mode 100644 kubernetes/apps/kube-system/hccm/app/helmrelease.yaml create mode 100644 kubernetes/apps/kube-system/hccm/app/kustomization.yaml create mode 100644 kubernetes/apps/kube-system/hccm/ks.yaml create mode 100644 kubernetes/flux/repositories/helm/hetzner.yaml diff --git a/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml b/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml new file mode 100644 index 0000000..c629077 --- /dev/null +++ b/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml @@ -0,0 +1,18 @@ +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: hcloud + namespace: kube-system +spec: + secretStoreRef: + kind: ClusterSecretStore + name: onepassword-connect + target: + name: hcloud + creationPolicy: Owner + data: + - secretKey: network + remoteRef: + key: hetzner + property: cloud-api-token diff --git a/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml b/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml new file mode 100644 index 0000000..1d4d1ef --- /dev/null +++ b/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml @@ -0,0 +1,21 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: hccm + namespace: kube-system +spec: + interval: 30m + chart: + spec: + chart: hcloud-cloud-controller-manager + version: v1.18.0 + sourceRef: + kind: HelmRepository + name: hetzner + namespace: flux-system + interval: 30m + values: + metrics: + enabled: true diff --git a/kubernetes/apps/kube-system/hccm/app/kustomization.yaml b/kubernetes/apps/kube-system/hccm/app/kustomization.yaml new file mode 100644 index 0000000..749cbd1 --- /dev/null +++ b/kubernetes/apps/kube-system/hccm/app/kustomization.yaml @@ -0,0 +1,7 @@ +# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - ./helmrelease.yaml diff --git a/kubernetes/apps/kube-system/hccm/ks.yaml b/kubernetes/apps/kube-system/hccm/ks.yaml new file mode 100644 index 0000000..916a824 --- /dev/null +++ b/kubernetes/apps/kube-system/hccm/ks.yaml @@ -0,0 +1,16 @@ +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cluster-apps-hetzner-hccm + namespace: flux-system + labels: + substitution.flux.home.arpa/enabled: "true" +spec: + interval: 10m + path: "./kubernetes/apps/kube-system/hccm/app" + prune: true + sourceRef: + kind: GitRepository + name: valinor + wait: true diff --git a/kubernetes/apps/kube-system/kustomization.yaml b/kubernetes/apps/kube-system/kustomization.yaml index a8875ab..2318d64 100644 --- a/kubernetes/apps/kube-system/kustomization.yaml +++ b/kubernetes/apps/kube-system/kustomization.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json --- apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization diff --git a/kubernetes/apps/kube-system/metrics-server/app/kustomization.yaml b/kubernetes/apps/kube-system/metrics-server/app/kustomization.yaml index 1c3fdb0..749cbd1 100644 --- a/kubernetes/apps/kube-system/metrics-server/app/kustomization.yaml +++ b/kubernetes/apps/kube-system/metrics-server/app/kustomization.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json --- apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization diff --git a/kubernetes/flux/repositories/helm/hetzner.yaml b/kubernetes/flux/repositories/helm/hetzner.yaml new file mode 100644 index 0000000..668285e --- /dev/null +++ b/kubernetes/flux/repositories/helm/hetzner.yaml @@ -0,0 +1,10 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: hetzner + namespace: flux-system +spec: + interval: 30m + url: https://charts.hetzner.cloud + timeout: 3m diff --git a/kubernetes/flux/repositories/helm/kustomization.yaml b/kubernetes/flux/repositories/helm/kustomization.yaml index deddf11..1ba2b62 100644 --- a/kubernetes/flux/repositories/helm/kustomization.yaml +++ b/kubernetes/flux/repositories/helm/kustomization.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json --- apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization @@ -12,6 +13,7 @@ resources: - external-secrets.yaml - fairwinds.yaml - grafana.yaml + - hetzner.yaml - ingress-nginx.yaml - jahanson.yaml - jetstack.yaml From 2b7279bb2821610a133f566ff435a46841fe5316 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Sun, 1 Oct 2023 19:17:40 -0500 Subject: [PATCH 03/15] Updated ks for hccm. --- kubernetes/apps/kube-system/kustomization.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kubernetes/apps/kube-system/kustomization.yaml b/kubernetes/apps/kube-system/kustomization.yaml index 2318d64..f2fee2c 100644 --- a/kubernetes/apps/kube-system/kustomization.yaml +++ b/kubernetes/apps/kube-system/kustomization.yaml @@ -7,3 +7,4 @@ resources: - ./namespace.yaml # Flux-Kustomizations - ./metrics-server/ks.yaml + - ./hccm/ks.yaml From 670f719a1578c40ce6261fd26998f98acbd0cc16 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 00:21:52 +0000 Subject: [PATCH 04/15] Adding external secret to ks. --- kubernetes/apps/kube-system/hccm/app/kustomization.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kubernetes/apps/kube-system/hccm/app/kustomization.yaml b/kubernetes/apps/kube-system/hccm/app/kustomization.yaml index 749cbd1..d868f4a 100644 --- a/kubernetes/apps/kube-system/hccm/app/kustomization.yaml +++ b/kubernetes/apps/kube-system/hccm/app/kustomization.yaml @@ -4,4 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: kube-system resources: + - ./externalsecret.yaml - ./helmrelease.yaml From e1b9ae0268242a92fc98ba2fc710295638131ba4 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 00:36:02 +0000 Subject: [PATCH 05/15] Update secret for hccm. --- kubernetes/apps/kube-system/hccm/app/externalsecret.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml b/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml index c629077..6e9f3a4 100644 --- a/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml +++ b/kubernetes/apps/kube-system/hccm/app/externalsecret.yaml @@ -12,7 +12,11 @@ spec: name: hcloud creationPolicy: Owner data: - - secretKey: network + - secretKey: token remoteRef: key: hetzner property: cloud-api-token + - secretKey: network + remoteRef: + key: hetzner + property: cloud-network-name From a53db34ed3d91396b06cd6e6e67a7dd85311e2f4 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 00:53:28 +0000 Subject: [PATCH 06/15] Apply hetzner lb annotations. --- .../network/ingress-nginx/app/helmrelease.yaml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml index 7904581..848b278 100644 --- a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml +++ b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml @@ -18,11 +18,11 @@ spec: controller: replicaCount: 3 - hostPort: - enabled: true - ports: - http: 81 - https: 444 + # hostPort: + # enabled: true + # ports: + # http: 81 + # https: 444 updateStrategy: type: Recreate @@ -31,8 +31,9 @@ spec: enabled: true type: LoadBalancer annotations: - external-dns.alpha.kubernetes.io/hostname: "ingress.valinor.social" - io.cilium/lb-ipam-ips: "10.2.42.1" + load-balancer.hetzner.cloud/location: fsn1 + load-balancer.hetzner.cloud/use-private-ip: "true" + externalTrafficPolicy: Local publishService: From 26445021def6e4bc45b086482523a333a7b9b6be Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 02:32:49 +0000 Subject: [PATCH 07/15] Update nginx annotations. --- kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml index 848b278..bd6a98b 100644 --- a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml +++ b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml @@ -32,7 +32,10 @@ spec: type: LoadBalancer annotations: load-balancer.hetzner.cloud/location: fsn1 - load-balancer.hetzner.cloud/use-private-ip: "true" + load-balancer.hetzner.cloud/protocol: tcp + load-balancer.hetzner.cloud/name: valinor-nginx + load-balancer.hetzner.cloud/use-private-ip: true + load-balancer.hetzner.cloud/uses-proxyprotocol: true externalTrafficPolicy: Local From d1045d28a923396ce31ee727d18b8890b95e222d Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 03:02:41 +0000 Subject: [PATCH 08/15] Enabling hetzner networks --- kubernetes/apps/kube-system/hccm/app/helmrelease.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml b/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml index 1d4d1ef..09fc1ed 100644 --- a/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml +++ b/kubernetes/apps/kube-system/hccm/app/helmrelease.yaml @@ -19,3 +19,6 @@ spec: values: metrics: enabled: true + networking: + enabled: true + clusterCIDR: 10.244.0.0/16 From 27a400ce3d4d33f67d9f2a50163bd14d66583925 Mon Sep 17 00:00:00 2001 From: Smeagol Date: Mon, 2 Oct 2023 09:01:20 +0000 Subject: [PATCH 09/15] Update Thanos group --- .../monitoring/kube-prometheus-stack/app/helmrelease.yaml | 2 +- kubernetes/apps/monitoring/thanos/app/helmrelease.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml index 4163148..85baa4f 100644 --- a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml +++ b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml @@ -201,7 +201,7 @@ spec: enableAdminAPI: true walCompression: true thanos: - image: quay.io/thanos/thanos:v0.32.3 + image: quay.io/thanos/thanos:v0.32.4 objectStorageConfig: name: thanos-s3-secret key: objstore.yml diff --git a/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml b/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml index d3fa3ea..c7cc918 100644 --- a/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml +++ b/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml @@ -11,7 +11,7 @@ spec: chart: spec: chart: thanos - version: 12.13.5 + version: 12.13.6 sourceRef: kind: HelmRepository name: bitnami @@ -34,7 +34,7 @@ spec: image: registry: quay.io repository: thanos/thanos - tag: v0.32.3 + tag: v0.32.4 existingObjstoreSecret: thanos-s3-secret queryFrontend: enabled: true From 0ae24aaf0366fc50fae125fc9ee42f8240386c6d Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 17:26:34 +0000 Subject: [PATCH 10/15] Fixes metrics server not serving stats from worker nodes. --- .../apps/kube-system/metrics-server/app/helmrelease.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml b/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml index f7dc4bf..8b2f500 100644 --- a/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml +++ b/kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml @@ -18,3 +18,8 @@ spec: values: metrics: enabled: true + args: + - --kubelet-insecure-tls + - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname + - --kubelet-use-node-status-port + - --metric-resolution=15s From 745d9c64c6796fe7ae2f7a6bfa4ccc0a98d36f81 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 17:27:07 +0000 Subject: [PATCH 11/15] Added 3 worker nodes. --- talos/clusterconfig/.gitignore | 3 +++ talos/talconfig.yaml | 45 ++++++++++++++++++++++++++++++++++ 2 files changed, 48 insertions(+) diff --git a/talos/clusterconfig/.gitignore b/talos/clusterconfig/.gitignore index 7568faf..41f8760 100644 --- a/talos/clusterconfig/.gitignore +++ b/talos/clusterconfig/.gitignore @@ -2,3 +2,6 @@ valinor-aule.hsn.dev.yaml valinor-eonwe.hsn.dev.yaml valinor-arlen.hsn.dev.yaml talosconfig +valinor-vaire.hsn.dev.yaml +valinor-nienna.hsn.dev.yaml +valinor-orome.hsn.dev.yaml diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml index 3947df4..a842645 100644 --- a/talos/talconfig.yaml +++ b/talos/talconfig.yaml @@ -63,6 +63,51 @@ nodes: - network: 10.2.0.0/16 gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route). metric: 2048 + - hostname: vaire.hsn.dev + disableSearchDomain: true + ipAddress: 10.2.0.8 + controlPlane: false + installDiskSelector: + busPath: /dev/sda + networkInterfaces: + - interface: eth0 + dhcp: true + - interface: eth1 + dhcp: true + routes: + - network: 10.2.0.0/16 + gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route). + metric: 2048 + - hostname: nienna.hsn.dev + disableSearchDomain: true + ipAddress: 10.2.0.9 + controlPlane: false + installDiskSelector: + busPath: /dev/sda + networkInterfaces: + - interface: eth0 + dhcp: true + - interface: eth1 + dhcp: true + routes: + - network: 10.2.0.0/16 + gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route). + metric: 2048 + - hostname: orome.hsn.dev + disableSearchDomain: true + ipAddress: 10.2.0.10 + controlPlane: false + installDiskSelector: + busPath: /dev/sda + networkInterfaces: + - interface: eth0 + dhcp: true + - interface: eth1 + dhcp: true + routes: + - network: 10.2.0.0/16 + gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route). + metric: 2048 controlPlane: patches: From d792494249434c4ab899a64a83c4715b15bb64a3 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 18:41:45 +0000 Subject: [PATCH 12/15] Adding cilium to flux. --- .../kube-system/cilium/app/helmrelease.yaml | 60 +++++++++++++++++++ kubernetes/apps/kube-system/cilium/ks.yaml | 17 ++++++ 2 files changed, 77 insertions(+) create mode 100644 kubernetes/apps/kube-system/cilium/app/helmrelease.yaml create mode 100644 kubernetes/apps/kube-system/cilium/ks.yaml diff --git a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml new file mode 100644 index 0000000..996604f --- /dev/null +++ b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml @@ -0,0 +1,60 @@ +--- +# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: cilium + namespace: kube-system +spec: + interval: 30m + chart: + spec: + chart: cilium + version: 1.14.2 + sourceRef: + kind: HelmRepository + name: cilium + namespace: flux-system + maxHistory: 2 + install: + remediation: + retries: 3 + upgrade: + cleanupOnFail: true + remediation: + retries: 3 + uninstall: + keepHistory: false + values: + cluster: + name: valinor + id: 1 + ipam: + mode: kubernetes + kubeProxyReplacement: true + securityContext: + capabilities: + ciliumAgent: + - CHOWN + - KILL + - NET_ADMIN + - NET_RAW + - IPC_LOCK + - SYS_ADMIN + - SYS_RESOURCE + - DAC_OVERRIDE + - FOWNER + - SETGID + - SETUID + cleanCiliumState: + - NET_ADMIN + - SYS_ADMIN + - SYS_RESOURCE + cgroup: + autoMount: + enabled: false + hostRoot: /sys/fs/cgroup + # Talos Kubeprism + k8sServiceHost: localhost + k8sServicePort: 7445 + rollOutCiliumPods: true diff --git a/kubernetes/apps/kube-system/cilium/ks.yaml b/kubernetes/apps/kube-system/cilium/ks.yaml new file mode 100644 index 0000000..e2eadc5 --- /dev/null +++ b/kubernetes/apps/kube-system/cilium/ks.yaml @@ -0,0 +1,17 @@ +--- +# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cluster-apps-cilium + namespace: flux-system +spec: + interval: 30m + retryInterval: 1m + timeout: 5m + path: "./kubernetes/apps/kube-system/cilium/app" + prune: true + sourceRef: + kind: GitRepository + name: valinor + wait: false From c6508f9e665233b560d3d494bc6be1584bee0466 Mon Sep 17 00:00:00 2001 From: Smeagol Date: Mon, 2 Oct 2023 19:00:17 +0000 Subject: [PATCH 13/15] Update Helm release cert-manager-webhook-dnsimple to v0.0.8 --- .../apps/cert-manager/cert-manager/issuers/helmrelease.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml index a62c0a5..04a547a 100644 --- a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml @@ -10,7 +10,7 @@ spec: chart: spec: chart: cert-manager-webhook-dnsimple - version: 0.0.7 + version: 0.0.8 interval: 30m sourceRef: kind: HelmRepository From b3d0634a0960dcebc4bcff710645dc81bdd6455c Mon Sep 17 00:00:00 2001 From: Smeagol Date: Mon, 2 Oct 2023 19:00:25 +0000 Subject: [PATCH 14/15] Update prometheus-node-exporter Docker tag to v4.23.2 --- kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml b/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml index 69ed9ef..b6017b8 100644 --- a/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml +++ b/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml @@ -10,7 +10,7 @@ spec: chart: spec: chart: prometheus-node-exporter - version: 4.23.1 + version: 4.23.2 sourceRef: kind: HelmRepository name: prometheus-community From 26d159a4ccc2938b23ac5efb28f0d54fa1d665a8 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Mon, 2 Oct 2023 19:41:03 +0000 Subject: [PATCH 15/15] Default value for container port. --- .../apps/cert-manager/cert-manager/issuers/helmrelease.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml index 04a547a..a3cae95 100644 --- a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml @@ -33,3 +33,4 @@ spec: secretKeyRef: name: dnsimple-api-token key: letsencrypt-email + containerPort: 8443