Merge pull request #38 from evilmartians/0.5.0-preview-apps-infrastru…

…cture

preview-apps-infrastructure: update to 0.5.0

charts/preview-apps-infrastructure/Chart.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v2
+appVersion: "1.0.0"
+description: Creating infrastructure resources for preview apps
+name: preview-apps-infrastructure
+version: 0.5.0
+maintainers:
+  - name: Ilya Cherepanov
+    email: [email protected]
+
+dependencies:
+- name: kubernetes-replicator
+  repository: https://helm.mittwald.de
+  version: 2.10.0

charts/preview-apps-infrastructure/templates/certificate.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ .Values.certificate.name }}
+spec:
+  secretName: {{ .Values.certificate.name }}
+  issuerRef: 
+    kind: Issuer
+    name: {{ .Values.issuer.name }}
+  commonName: "*.{{ .Values.dnsZone }}"
+  dnsNames:
+    - "*.{{ .Values.dnsZone }}"
+  secretTemplate:
+    annotations:
+      replicator.v1.mittwald.de/replication-allowed: "true"
+      replicator.v1.mittwald.de/replication-allowed-namespaces: {{ .Values.certificate.allowedNamespaces }}

charts/preview-apps-infrastructure/values.yaml

@@ -0,0 +1,24 @@
+# DNS zone where preview apps will be created
+dnsZone: "preview.sandbox.evilmartians.net"
+
+# Certificate that will be used by all preview apps
+# Corresponding tls secret will have the same name
+certificate:
+  name: preview-apps-common-tls
+  # you will be able replicate certificate only to these namespaces
+  allowedNamespaces: "preview-pr-[0-9]+"
+
+# Cert-manager issuer
+issuer:
+  name: preview-apps
+  email: [email protected]
+  server: https://acme-v02.api.letsencrypt.org/directory
+  # DNS-01 challenge is the only way to get wildcard certificate
+  dns01:
+    route53:
+      region: us-east-1
+      hostedZoneID: Z0152EXAMPLE
+      accessKeyID: AKIA5EXAMPLE
+      secretAccessKeySecretRef:
+        name: route53-secret
+        key: secret-access-key