k8s-scripts/trinity.yaml

kind: Pod
apiVersion: v1
metadata:
  name: trinity-test-app
  labels:
    app: trinity-test
spec:
  containers:
    - name: trinity-test-app
      image: dock.blake.lol/trin-react:latest
  imagePullSecrets:
    - name: dock-blake-registry

---

kind: Service
apiVersion: v1
metadata:
  name: trinity-test-service
spec:
  selector:
    app: trinity-test
  ports:
    - port: 80

---

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: trinity-letsencrypt-staging
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: trinity@bsch.ca
    privateKeySecretRef:
      name: trinity-letsencrypt-staging
    solvers:
    - http01:
        ingress:
          class:  nginx

---

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: trinity-letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: trinity@bsch.ca
    privateKeySecretRef:
      name: trinity-letsencrypt-prod
    solvers:
    - http01:
        ingress:
          class: nginx

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: trinity-ingress
  annotations:
    cert-manager.io/issuer: "trinity-letsencrypt-staging"
#    nginx.ingress.kubernetes.io/ssl-redirect: "false"
spec:
  tls:
  - hosts:
      - trinitytest.bsch.ca
    secretName: trinity-tls-secret-staging
  rules:
  - host: trinitytest.bsch.ca
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: trinity-test-service
            port:
              number: 80