Add cert manager to nextcloud

customers/base/kustomization.yaml

@@ -3,6 +3,7 @@ resources:
   - apache-php-configmap.yml
   - apcu-configmap.yml
   - cli-php-configmap.yml
+  - nextcloud-cert-issuer.yml
   - nextcloud-configmap.yml
   - nextcloud-deployment.yml
   - nextcloud-ingress.yml

customers/base/nextcloud-cert-issuer.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: drive@sunet.se
+    privateKeySecretRef:
+      name: letsencrypt
+    solvers:
+      - http01:
+          ingress: 
+            class: nginx
+

customers/base/nextcloud-ingress.yml

@@ -4,10 +4,10 @@ kind: Ingress
 metadata:
   name: customer-ingress
   annotations:
-    kubernetes.io/ingress.class: traefik
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
+    cert-manager.io/issuer: "letsencrypt"
+    acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
+  ingressClassName: nginx
   defaultBackend:
     service:
       name: customer-node

customers/overlays/nordunet/test/nextcloud-ingress.yml

@@ -4,8 +4,10 @@ kind: Ingress
 metadata:
   name: customer-ingress
   annotations:
-    kubernetes.io/ingress.class: nginx
+    cert-manager.io/issuer: "letsencrypt"
+    acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
+  ingressClassName: nginx
   tls:
     - hosts:
         - nordunet.drive.test.sunet.se 

customers/overlays/vinnova/test/nextcloud-ingress.yml

@@ -4,8 +4,10 @@ kind: Ingress
 metadata:
   name: customer-ingress
   annotations:
-    kubernetes.io/ingress.class: nginx
+    cert-manager.io/issuer: "letsencrypt"
+    acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
+  ingressClassName: nginx
   tls:
     - hosts:
         - vinnova.drive.test.sunet.se