Merge branch 'master' of vcs.bsch.ca:public/k8s-scripts

ingress-nginx.yaml

@@ -410,7 +410,7 @@ spec:
 # Source: ingress-nginx/templates/admission-webhooks/validating-webhook.yaml
 # before changing this value, check the required kubernetes version
 # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#prerequisites
-apiVersion: admissionregistration.k8s.io/v1beta1
+apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   labels:

openfaas-ingress.yaml

@@ -0,0 +1,61 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  namespace: openfaas
+  name: faas-letsencrypt-staging
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: trin4@bgs.dev
+    privateKeySecretRef:
+      name: faas-letsencrypt-staging
+    solvers:
+    - http01:
+        ingress:
+          class:  nginx
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  namespace: openfaas
+  name: faas-letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: trin4@bgs.dev
+    privateKeySecretRef:
+      name: faas-letsencrypt-prod
+    solvers:
+    - http01:
+        ingress:
+          class: nginx
+
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: openfaas
+  name: faas-ingress
+  annotations:
+    cert-manager.io/issuer: "faas-letsencrypt-prod"
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+spec:
+  tls:
+  - hosts:
+      - faas.bsch.ca
+    secretName: faas-tls-secret-prod
+  rules:
+  - host: faas.bsch.ca
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: gateway
+            port:
+              number: 8080
+

openfaas-namespaces.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: openfaas
+  annotations:
+    linkerd.io/inject: enabled
+    config.linkerd.io/skip-inbound-ports: "4222"
+    config.linkerd.io/skip-outbound-ports: "4222"
+  labels:
+    role: openfaas-system
+    access: openfaas-system
+    istio-injection: enabled
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: openfaas-fn
+  annotations:
+    linkerd.io/inject: enabled
+    config.linkerd.io/skip-inbound-ports: "4222"
+    config.linkerd.io/skip-outbound-ports: "4222"
+  labels:
+    istio-injection: enabled
+    role: openfaas-fn