apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: roka-letsencrypt-staging
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: roka@bsch.ca
    privateKeySecretRef:
      name: roka-letsencrypt-staging
    solvers:
    - http01:
        ingress:
          class: nginx

---

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: roka-letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: roka@bsch.ca
    privateKeySecretRef:
      name: roka-letsencrypt-prod
    solvers:
    - http01:
        ingress:
          class: nginx

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: roka-ingress
  annotations:
    cert-manager.io/issuer: "roka-letsencrypt-prod"
    nginx.ingress.kubernetes.io/proxy-body-size: 4096m
#    nginx.ingress.kubernetes.io/ssl-redirect: "false"
spec:
  tls:
  - hosts:
      - roka1.bsch.ca
      - content.roka1.bsch.ca
      - s3.roka1.bsch.ca
      - test.credolinx.ca
      - test.credolinx.com
      - data.roka1.bsch.ca
    secretName: roka-tls-secret-prod
  rules:
  - host: roka1.bsch.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: roka-dev-service
            port:
              number: 80
  - host: data.roka1.bsch.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: roka-server-test-service
            port:
              number: 8080
  - host: test.credolinx.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: roka-test-service
            port:
              number: 80
  - host: test.credolinx.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: roka-test-service
            port:
              number: 80
  - host: content.roka1.bsch.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ipfs-service
            port:
              number: 8080
  - host: s3.roka1.bsch.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: s3-external-service
            port:
              number: 9000