Update cd.yml

JuribaDev · Aug 29, 2024 · 816fc1a · 816fc1a
1 parent d402ebd
commit 816fc1a
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 17 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -104,25 +104,16 @@ jobs:
             echo "cert-manager is already installed."
           fi
 
+          sudo chmod 777 k8s/cluster-issuer.yaml
+
           # Create ClusterIssuer if it doesn't exist
           if ! kubectl get clusterissuer letsencrypt-prod &> /dev/null; then
-            cat<<EOF | kubectl apply -f -
-            apiVersion: cert-manager.io/v1
-            kind: ClusterIssuer
-            metadata:
-              name: letsencrypt-prod
-            spec:
-              acme:
-                server: https://acme-v02.api.letsencrypt.org/directory
-                email: ${{ secrets.LETSENCRYPT_EMAIL }}
-                privateKeySecretRef:
-                  name: letsencrypt-prod
-                solvers:
-                - http01:
-                    ingress:
-                      class: nginx
-            EOF
-            
+            sed -i "s|LETSENCRYPT_EMAIL_PLACEHOLDER|${{ secrets.LETSENCRYPT_EMAIL }}|g" k8s/cluster-issuer.yaml
+            kubectl apply -f k8s/cluster-issuer.yaml
+            echo "ClusterIssuer created."
+          else
+            echo "ClusterIssuer already exists."
+          fi
             echo "ClusterIssuer created."
           else
             echo "ClusterIssuer already exists."

diff --git a/k8s/cluster-issuer.yaml b/k8s/cluster-issuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: LETSENCRYPT_EMAIL_PLACEHOLDER
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    solvers:
+      - http01:
+          ingress:
+            class: nginx