From b65c35df4ce56ccd5fb482ab7d37386d45b30f1c Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Tue, 11 Aug 2026 14:11:53 +0100
Subject: [PATCH] creating job to reverse-proxy ns as a test but also in prep
 for the transition

---
 Certbot_Cron_wildcart_jobs_root_domain.yaml | 37 +++++++++++++++++++++
 ovh.secret.yaml                             | 10 ++++++
 2 files changed, 47 insertions(+)
 create mode 100644 Certbot_Cron_wildcart_jobs_root_domain.yaml

diff --git a/Certbot_Cron_wildcart_jobs_root_domain.yaml b/Certbot_Cron_wildcart_jobs_root_domain.yaml
new file mode 100644
index 0000000..cdc0cd7
--- /dev/null
+++ b/Certbot_Cron_wildcart_jobs_root_domain.yaml
@@ -0,0 +1,37 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: certbotwilcart
+  namespace: reverse-proxy
+spec:
+  schedule: "0 0 */15 * *"
+  jobTemplate:
+    spec:
+      backoffLimit: 4
+      ttlSecondsAfterFinished: 100
+      template:
+        spec:
+          nodeName: kube-master
+          containers: 
+          - name: certbotwildcart
+            image: certbot/dns-ovh:latest
+            command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.geeraert.eu"]
+            volumeMounts:
+            - name: reverse-proxy-ssl
+              mountPath: /var/www/certbot/
+            - name: letsencrypt-log
+              mountPath: /var/log/letsencrypt/
+            - name: secret-ovh
+              mountPath: /secret/
+          volumes:
+          - name: reverse-proxy-ssl
+            persistentVolumeClaim:
+              claimName: reverse-proxy-ssl
+          - name: letsencrypt-log
+            hostPath:
+              path: /var/log/letsencrypt/
+          - name: secret-ovh
+            secret:
+              secretName: ovh-secret-certbot
+          restartPolicy: Never
+
diff --git a/ovh.secret.yaml b/ovh.secret.yaml
index 2478e7a..176766c 100644
--- a/ovh.secret.yaml
+++ b/ovh.secret.yaml
@@ -5,3 +5,13 @@ kind: Secret
 metadata:
   creationTimestamp: null
   name: ovh-secret-certbot
+  namespace: certbot
+---
+apiVersion: v1
+data:
+  ovh.ini: IyBPVkggQVBJIGNyZWRlbnRpYWxzIHVzZWQgYnkgQ2VydGJvdApkbnNfb3ZoX2VuZHBvaW50ID0gb3ZoLWV1CmRuc19vdmhfYXBwbGljYXRpb25fa2V5ID0gJzk1MzAyOWU5MjY5OTM4M2InCmRuc19vdmhfYXBwbGljYXRpb25fc2VjcmV0ID0gJzBjNjg4NTRkY2Q2YmI4MjYxZjExZjgyYWIyMzE0ZDdlJwpkbnNfb3ZoX2NvbnN1bWVyX2tleSA9ICc4Y2M5Yzk2MjQxZDg1NDBhMjNmNjY1Mjg4ZWNiYzZhMScK
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: ovh-secret-certbot
+  namespace: reverse-proxy