yolokube/core-deployments
yolokube/core-deployments
3
3
Fork 0
Code Issues 3 Pull requests Projects Wiki Activity

disable basicauth for acme challenges 🍇

Browse source
This commit is contained in:
Aaron Riedel 2023-04-21 09:34:41 +02:00
parent f66674a69a
commit 84f3e623b5
Signed by: aaron
GPG key ID: 643004654D40D577
2 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ingress/values.yaml
View file

@ -1,4 +1,5 @@
controller: controller:
enableSnippets: true
hostNetwork: true hostNetwork: true
setAsDefaultIngress: true setAsDefaultIngress: true
service: service:

8
prometheus/ingress.yaml
View file

@ -9,6 +9,10 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true" acme.cert-manager.io/http01-edit-in-place: "true"
ingress.kubernetes.io/ssl-redirect: "false" ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ^~ /.well-known/acme-challenge/ {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server" #nginx.org/ssl-services: "prometheus-server"
spec: spec:
@ -38,6 +42,10 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod cert-manager.io/cluster-issuer: letsencrypt-prod
acme.cert-manager.io/http01-edit-in-place: "true" acme.cert-manager.io/http01-edit-in-place: "true"
ingress.kubernetes.io/ssl-redirect: "false" ingress.kubernetes.io/ssl-redirect: "false"
nginx.org/server-snippets: |
location ^~ /.well-known/acme-challenge/ {
auth_basic off;
}
nginx.org/basic-auth-secret: prometheus-basic-auth-secret nginx.org/basic-auth-secret: prometheus-basic-auth-secret
#nginx.org/ssl-services: "prometheus-server" #nginx.org/ssl-services: "prometheus-server"
spec: spec: