shockrah/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Common names now line up with hostnames in certificate through the 1 ingress (fire emoji)
Some checks failed
Ansible Linting / ansible-lint (push) Failing after 8s
Details
Secops Linting and Safety Checks / checkov-scan-s3 (push) Failing after 21s
Details

Browse Source
This commit is contained in:
shockrah 2026-01-13 23:18:41 -08:00
parent 1c11410c2d
commit ee860c6e1f
1 changed files with 11 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
infra/vultr-kubernetes/ingress.tf
View File

@ -1,9 +1,9 @@
locals { locals {
services = { services = {
code = kubernetes_service.gitea "code.shockrah.xyz" = kubernetes_service.gitea
sanity = kubernetes_service_v1.health "sanity.shockrah.xyz" = kubernetes_service_v1.health
uptime = kubernetes_service.kuma "uptime.shockrah.xyz" = kubernetes_service.kuma
wiki = kubernetes_service.otterwiki "wiki.shockrah.xyz" = kubernetes_service.otterwiki
} }
} }
resource kubernetes_ingress_v1 health { resource kubernetes_ingress_v1 health {
@ -17,19 +17,17 @@ resource kubernetes_ingress_v1 health {
} }
spec { spec {
ingress_class_name = "nginx" ingress_class_name = "nginx"
tls { dynamic tls {
hosts = [ for_each = local.services
"sanity.shockrah.xyz", content {
"uptime.shockrah.xyz", hosts = [tls.key]
"code.shockrah.xyz", secret_name = "${tls.value.metadata[0].name}-secret"
"wiki.shockrah.xyz" }
]
secret_name = "shockrah"
} }
dynamic "rule" { dynamic "rule" {
for_each = local.services for_each = local.services
content { content {
host = "${rule.key}.shockrah.xyz" host = "${rule.key}"
http { http {
path { path {
path = "/" path = "/"