trinity

trinity.yaml

@@ -0,0 +1,85 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: trinity-test-app
+  labels:
+    app: trinity-test
+spec:
+  containers:
+    - name: trinity-test-app
+      image: dock.blake.lol/trin-react:latest
+  imagePullSecrets:
+    - name: dock-blake-registry
+
+---
+
+kind: Service
+apiVersion: v1
+metadata:
+  name: trinity-test-service
+spec:
+  selector:
+    app: trinity-test
+  ports:
+    - port: 80
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: trinity-letsencrypt-staging
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: trinity@bsch.ca
+    privateKeySecretRef:
+      name: trinity-letsencrypt-staging
+    solvers:
+    - http01:
+        ingress:
+          class:  nginx
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: trinity-letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: trinity@bsch.ca
+    privateKeySecretRef:
+      name: trinity-letsencrypt-prod
+    solvers:
+    - http01:
+        ingress:
+          class: nginx
+
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: trinity-ingress
+  annotations:
+    cert-manager.io/issuer: "trinity-letsencrypt-staging"
+#    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+spec:
+  tls:
+  - hosts:
+      - trinitytest.bsch.ca
+    secretName: trinity-tls-secret-staging
+  rules:
+  - host: trinitytest.bsch.ca
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: trinity-test-service
+            port:
+              number: 80
+