staging cerft test

infrastructure/03-traefik/shared/base/traefik-tlsstore.yaml

@@ -1,17 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: TLSStore
-metadata:
-  name: default
-  namespace: default
-
-spec:
-  secretName: letsencrypt-ionos-key
-  issuerRef:
-    kind: ClusterIssuer
-    name: letsencrypt-prod
-  defaultGeneratedCert:
-    resolver: default
-    domain:
-      main: steffenillium.de
-      sans:
-        - '*.steffenillium.de'

infrastructure/03-traefik/shared/kustomization.yaml

@@ -5,7 +5,6 @@ resources:
   - foreign
   - base/traefik-middleware-default-headers.yaml
   - base/traefik-pvc.yaml
-  - base/traefik-tlsstore.yaml
   - crds
   - base/dc-secret-sealed.yaml
   - base/traefik-namespace.yaml

infrastructure/07-certmanager/cainjector-cm.yaml

@@ -1,9 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: cert-manager-cainjector
-  namespace: cert-manager
-  labels:
-    app: cainjector
-data:
-  leader-election-namespace: cert-manager

infrastructure/07-certmanager/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 namespace: cert-manager
 
 resources:
+  - wildcard-cert.yaml
   - dns-issuer.yaml
   - ionos-secret-sealed.yaml
   - https://github.com/cert-manager/cert-manager/releases/download/v1.14.4/cert-manager.crds.yaml

infrastructure/07-certmanager/wildcard-cert.yaml

@@ -0,0 +1,22 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-example-com
+  namespace: traefik
+spec:
+  secretName: wildcard-cert
+  dnsNames:
+    - "steffenillium.de"
+    - "*.steffenillium.de"
+  issuerRef:
+    name: letsencrypt-staging
+    kind: ClusterIssuer
+---
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: default
+  namespace: traefik
+spec:
+  defaultCertificate:
+    secretName: wildcard-cert