argo/ingress.yaml

@@ -2,8 +2,6 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: argocd-ingress
   namespace: argocd
 spec:
@@ -18,7 +16,3 @@ spec:
             name: argocd-server
             port:
               number: 80
-  tls:
-  - hosts:
-      - argo.services.yolokube.de
-    secretName: argocd-tls-key

dashboard/base/dashboard.yaml

@@ -49,8 +49,6 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: dashboard-ingress
   namespace: dashboard
 spec:
@@ -65,7 +63,3 @@ spec:
             name: dashboard-service
             port:
               number: 80
-  tls:
-  - hosts:
-      - dashboard.services.yolokube.de
-    secretName: dashboard-tls-key

dashboard/overlays/prod/kustomization.yaml

@@ -5,5 +5,5 @@ kind: Kustomization
 images:
 - name: git.ar21.de/yolokube/dashboard
   newName: git.ar21.de/yolokube/dashboard
-  newTag: "1113"
+  newTag: "1110"
 namespace: dashboard

dashboard/overlays/staging/kustomization.yaml

@@ -5,7 +5,7 @@ kind: Kustomization
 images:
 - name: git.ar21.de/yolokube/dashboard
   newName: git.ar21.de/yolokube/dashboard
-  newTag: staging-1111
+  newTag: staging-1107
 namespace: dashboard-staging
 patches:
 - patch: |-
@@ -15,13 +15,6 @@ patches:
   target:
     kind: Ingress
     name: dashboard-ingress
-- patch: |-
-    - op: replace
-      path: /spec/tls/0/hosts/0
-      value: "dashboard-staging.services.yolokube.de"
-  target:
-    kind: Ingress
-    name: dashboard-ingress
 - patch: |-
     - op: replace
       path: /spec/replicas

dashboard/prod/dashboard.yaml

@@ -34,7 +34,7 @@ spec:
         app: dashboard
     spec:
       containers:
-      - image: git.ar21.de/yolokube/dashboard:1113
+      - image: git.ar21.de/yolokube/dashboard:1110
         imagePullPolicy: Always
         livenessProbe:
           httpGet:
@@ -49,8 +49,6 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: dashboard-ingress
   namespace: dashboard
 spec:
@@ -65,7 +63,3 @@ spec:
               number: 80
         path: /
         pathType: Prefix
-  tls:
-  - hosts:
-    - dashboard.services.yolokube.de
-    secretName: dashboard-tls-key

dashboard/staging/dashboard.yaml

@@ -34,7 +34,7 @@ spec:
         app: dashboard
     spec:
       containers:
-      - image: git.ar21.de/yolokube/dashboard:staging-1111
+      - image: git.ar21.de/yolokube/dashboard:staging-1107
         imagePullPolicy: Always
         livenessProbe:
           httpGet:
@@ -49,8 +49,6 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: dashboard-ingress
   namespace: dashboard-staging
 spec:
@@ -65,7 +63,3 @@ spec:
               number: 80
         path: /
         pathType: Prefix
-  tls:
-  - hosts:
-    - dashboard-staging.services.yolokube.de
-    secretName: dashboard-tls-key

examples/example-deployment.yaml

@@ -65,12 +65,11 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
-    # Use for Basic auth:
-    # traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
   name: example-ingress
   namespace: example
+  #annotations:
+  # Use for Basic auth:
+  #  traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
 spec:
   rules:
   - host: "example.apps.yolokube.de"
@@ -83,7 +82,3 @@ spec:
             name: example-service
             port:
               number: 80
-  tls:
-  - hosts:
-      - example.apps.yolokube.de
-    secretName: example-tls-key

longhorn/values.yaml

@@ -24,10 +24,7 @@ ingress:
   enabled: true
   host: longhorn.services.yolokube.de
   annotations:
-    kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
-  tls: true
-  tlsSecret: longhorn-tls-key
 metrics:
   serviceMonitor:
     enabled: true

prometheus/values.yaml

@@ -60,11 +60,6 @@ alertmanager:
       - alertmanager.services.yolokube.de
     annotations:
       traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
-      kubernetes.io/tls-acme: "true"
-    tls:
-      - secretName: alertmanager-tls-key
-        hosts:
-          - alertmanager.services.yolokube.de
   ingressPerReplica:
     pathType: ImplementationSpecific
     paths:
@@ -74,25 +69,15 @@ alertmanager:
     hostDomain: services.yolokube.de
     annotations:
       traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
-      kubernetes.io/tls-acme: "true"
-    tlsSecretPerReplica:
-      enabled: true
-      prefix: alertmanager
   servicePerReplica:
     enabled: true
   podAntiAffinity: "hard"
 grafana:
   defaultDashboardsTimezone: Europe/Berlin
   ingress:
-    annotations:
-      kubernetes.io/tls-acme: "true"
     enabled: true
     hosts:
       - grafana.services.yolokube.de
-    tls:
-      - secretName: grafana-tls-key
-        hosts:
-          - grafana.services.yolokube.de
   persistence:
     enabled: true
     accessModes:
@@ -121,11 +106,6 @@ prometheus:
       - prometheus.services.yolokube.de
     annotations:
       traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
-      kubernetes.io/tls-acme: "true"
-    tls:
-      - secretName: prometheus-tls-key
-        hosts:
-          - prometheus.services.yolokube.de
   ingressPerReplica:
     pathType: ImplementationSpecific
     paths:
@@ -135,10 +115,6 @@ prometheus:
     hostDomain: services.yolokube.de
     annotations:
       traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-auth@kubernetescrd
-      kubernetes.io/tls-acme: "true"
-    tlsSecretPerReplica:
-      enabled: true
-      prefix: prometheus
   prometheusSpec:
     retentionSize: "45GB"
     replicas: 2

tests/test-ingress.yaml

@@ -44,8 +44,6 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: test1-ingress
   namespace: aaron-test
 spec:
@@ -60,7 +58,3 @@ spec:
             name: test1-service
             port:
               number: 80
-  tls:
-  - hosts:
-      - test.apps.yolokube.de
-    secretName: test1-tls-key

tests/test-storage.yaml

@@ -66,8 +66,6 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
-    kubernetes.io/tls-acme: "true"
   name: paste-ingress
   namespace: paste
 spec:
@@ -82,7 +80,3 @@ spec:
             name: paste-service
             port:
               number: 80
-  tls:
-  - hosts:
-      - paste.apps.yolokube.de
-    secretName: paste-tls-key

traefik/dashboard-cert.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: traefik-cert
-  namespace: traefik
-spec:
-  secretName: traefik-tls-key
-  issuerRef:
-    name: letsencrypt-prod
-    kind: ClusterIssuer
-  dnsNames:
-    - traefik.services.yolokube.de