disable basicauth for acme challenges 🍇

This commit is contained in:
Aaron Riedel 2023-04-21 09:34:41 +02:00
parent f66674a69a
commit 84f3e623b5
Signed by: aaron
GPG key ID: 643004654D40D577
2 changed files with 10 additions and 1 deletions

View file

@ -1,6 +1,7 @@
controller:
enableSnippets: true
hostNetwork: true
setAsDefaultIngress: true
setAsDefaultIngress: true
service:
create: false
kind: daemonset

View file

@ -9,6 +9,10 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true"
ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ^~ /.well-known/acme-challenge/ {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server"
spec:
@ -38,6 +42,10 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true"
ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ^~ /.well-known/acme-challenge/ {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server"
spec: