Disable http challenge;Inject stepca cert;Set default certresolver

2022-08-25 12:04:51 +02:00
parent 1c43bb19d2
commit fba2e3e4b1
2 changed files with 18 additions and 3 deletions
--- a/ansible/vars/metacluster.yml
+++ b/ansible/vars/metacluster.yml
@ -16,8 +16,6 @@ platform:
            additionalArguments:
              - "--certificatesResolvers.stepca.acme.caserver=https://step-certificates.step-ca.svc.cluster.local/acme/acme/directory"
              - "--certificatesResolvers.stepca.acme.email=admin"
-              - "--certificatesResolvers.stepca.acme.httpChallenge=true"
-              - "--certificatesResolvers.stepca.acme.httpChallenge.entryPoint=web"
              - "--certificatesResolvers.stepca.acme.storage=/data/acme.json"
              - "--certificatesResolvers.stepca.acme.tlsChallenge=true"
            globalArguments: []
@ -30,6 +28,9 @@ platform:
                protocol: TCP
              web:
                redirectTo: websecure
+              websecure:
+                tls:
+                  certResolver: stepca

  helm_repositories:
    - name: longhorn