Update cert-manager to 1.1.0 and use ingressShims for automated Certificates. - Githubissues

vanvalenlab / kiosk-console

DeepCell Kiosk Distribution for Kubernetes on GKE and AWS

https://deepcell-kiosk.readthedocs.io

Other

35 stars 6 forks source link

Update cert-manager to 1.1.0 and use ingressShims for automated Certificates. #400

Closed willgraf closed 3 years ago

willgraf commented 3 years ago

Features

Deploy CertificateIssuers with a new helmfile using the incubator/raw chart.
Add a post-sync hook to give cert-manager time to initialize before the certificate-issuers are deployed.
Using ingressShims and ingress annotations to automatically deploy Certificates.
Use GCP_DNS_SOLVER_NAME, GCP_CLOUD_DNS_SERVICE_ACCOUNT, and CERTIFICATE_MANAGER_CLUSTER_ISSUER to template the service accounts and active issuer.

Bugfixes

frontend chart is updated to 0.2.1 with fixed ingress templating introduced in #395.
Fixed bug where the Service Account secret was not being created in the correct namespace.
Deleted the Service Account key when tearing down the cluster (Fixes #391)