new work

Certbot_Cron_wildcard_jobs.yaml

@@ -1,13 +1,8 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
 apiVersion: batch/v1
 kind: CronJob
 metadata:
-  name: certbotwilcart
-  namespace: certbot
+  name: certbotwilcard
+  namespace: reverse-proxy
 spec:
   schedule: "0 0 */15 * *"
   jobTemplate:
@@ -18,32 +13,23 @@ spec:
         spec:
           nodeName: kube-master
           containers: 
-          - name: certbotwildcart
+          - name: certbotwildcard
             image: certbot/dns-ovh:latest
             command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.tryton.geeraert.eu"]
             volumeMounts:
-            - name: certbot-www
-              mountPath: /var/www/certbot/
-            - name: certbot-conf
+            - name: reverse-proxy-ssl
               mountPath: /etc/letsencrypt/
             - name: letsencrypt-log
               mountPath: /var/log/letsencrypt/
             - name: secret-ovh
               mountPath: /secret/
           volumes:
-          - name: certbot-www
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-          - name: certbot-conf
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
+          - name: reverse-proxy-ssl
+            persistentVolumeClaim:
+              claimName: reverse-proxy-ssl
           - name: letsencrypt-log
             hostPath:
               path: /var/log/letsencrypt/
-          #- name: secret-ovh
-          #  hostPath:
-          #    path: /opt/kubernetes/Certbot_jobs/ovh.ini
-          #    type: File
           - name: secret-ovh
             secret:
               secretName: ovh-secret-certbot

Certbot_Cron_wildcard_jobs_root_domain.yaml

@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: certbotwildcardroot
+  namespace: reverse-proxy
+spec:
+  schedule: "0 0 */15 * *"
+  jobTemplate:
+    spec:
+      backoffLimit: 4
+      ttlSecondsAfterFinished: 100
+      template:
+        spec:
+          nodeName: kube-master
+          containers: 
+          - name: certbotwildcardroot
+            image: certbot/dns-ovh:latest
+            #command: ["sleep","3600"]
+            command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.geeraert.eu"]
+            volumeMounts:
+            - name: reverse-proxy-ssl
+              mountPath: /etc/letsencrypt/
+            - name: letsencrypt-log
+              mountPath: /var/log/letsencrypt/
+            - name: secret-ovh
+              mountPath: /secret/
+          volumes:
+          - name: reverse-proxy-ssl
+            persistentVolumeClaim:
+              claimName: reverse-proxy-ssl
+          - name: letsencrypt-log
+            hostPath:
+              path: /var/log/letsencrypt/
+          - name: secret-ovh
+            secret:
+              secretName: ovh-secret-certbot
+          restartPolicy: Never
+

ovh.secret.yaml

@@ -5,3 +5,13 @@ kind: Secret
 metadata:
   creationTimestamp: null
   name: ovh-secret-certbot
+  namespace: certbot
+---
+apiVersion: v1
+data:
+  ovh.ini: IyBPVkggQVBJIGNyZWRlbnRpYWxzIHVzZWQgYnkgQ2VydGJvdApkbnNfb3ZoX2VuZHBvaW50ID0gb3ZoLWV1CmRuc19vdmhfYXBwbGljYXRpb25fa2V5ID0gJzk1MzAyOWU5MjY5OTM4M2InCmRuc19vdmhfYXBwbGljYXRpb25fc2VjcmV0ID0gJzBjNjg4NTRkY2Q2YmI4MjYxZjExZjgyYWIyMzE0ZDdlJwpkbnNfb3ZoX2NvbnN1bWVyX2tleSA9ICc4Y2M5Yzk2MjQxZDg1NDBhMjNmNjY1Mjg4ZWNiYzZhMScK
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: ovh-secret-certbot
+  namespace: reverse-proxy