new work

Certbot_Cron_renew_jobs.yaml.old

@@ -1,40 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: certbotrenew
-  namespace: certbot
-spec:
-  schedule: "0 0 */15 * *"
-  jobTemplate:
-    spec:
-      ttlSecondsAfterFinished: 100
-      template:
-        spec:
-          containers: 
-          - name: certbotrenew
-            image: certbot/certbot:latest
-            command: ["certbot","renew", "--non-interactive", "--agree-tos", "-m", "franckrobbin6@gmail.com", "--webroot", "--webroot-path", "/var/www/certbot/"]
-            volumeMounts:
-            - name: certbot-www
-              mountPath: /var/www/certbot/
-            - name: certbot-conf
-              mountPath: /etc/letsencrypt/
-            - name: letsencrypt-log
-              mountPath: /var/log/letsencrypt/
-          volumes:
-          - name: certbot-www
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-          - name: certbot-conf
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
-          - name: letsencrypt-log
-            hostPath:
-              path: /var/log/letsencrypt/
-          restartPolicy: Never
-

Certbot_Cron_wildcard_jobs.yaml

@@ -1,48 +1,35 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
 apiVersion: batch/v1
 kind: CronJob
 metadata:
-  name: certbotwilcart
-  namespace: certbot
+  name: certbotwilcard
+  namespace: reverse-proxy
 spec:
   schedule: "0 0 */15 * *"
   jobTemplate:
     spec:
+      backoffLimit: 4
       ttlSecondsAfterFinished: 100
       template:
         spec:
           nodeName: kube-master
           containers: 
-          - name: certbotwildcart
+          - name: certbotwildcard
             image: certbot/dns-ovh:latest
             command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.tryton.geeraert.eu"]
             volumeMounts:
-            - name: certbot-www
-              mountPath: /var/www/certbot/
-            - name: certbot-conf
+            - name: reverse-proxy-ssl
               mountPath: /etc/letsencrypt/
             - name: letsencrypt-log
               mountPath: /var/log/letsencrypt/
             - name: secret-ovh
               mountPath: /secret/
           volumes:
-          - name: certbot-www
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-          - name: certbot-conf
-            hostPath:
-               path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
+          - name: reverse-proxy-ssl
+            persistentVolumeClaim:
+              claimName: reverse-proxy-ssl
           - name: letsencrypt-log
             hostPath:
               path: /var/log/letsencrypt/
-          #- name: secret-ovh
-          #  hostPath:
-          #    path: /opt/kubernetes/Certbot_jobs/ovh.ini
-          #    type: File
           - name: secret-ovh
             secret:
               secretName: ovh-secret-certbot

Certbot_Cron_wildcard_jobs_root_domain.yaml

@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: certbotwildcardroot
+  namespace: reverse-proxy
+spec:
+  schedule: "0 0 */15 * *"
+  jobTemplate:
+    spec:
+      backoffLimit: 4
+      ttlSecondsAfterFinished: 100
+      template:
+        spec:
+          nodeName: kube-master
+          containers: 
+          - name: certbotwildcardroot
+            image: certbot/dns-ovh:latest
+            #command: ["sleep","3600"]
+            command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.geeraert.eu"]
+            volumeMounts:
+            - name: reverse-proxy-ssl
+              mountPath: /etc/letsencrypt/
+            - name: letsencrypt-log
+              mountPath: /var/log/letsencrypt/
+            - name: secret-ovh
+              mountPath: /secret/
+          volumes:
+          - name: reverse-proxy-ssl
+            persistentVolumeClaim:
+              claimName: reverse-proxy-ssl
+          - name: letsencrypt-log
+            hostPath:
+              path: /var/log/letsencrypt/
+          - name: secret-ovh
+            secret:
+              secretName: ovh-secret-certbot
+          restartPolicy: Never
+

Certbot_manual_certonly.yaml.old

@@ -1,37 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: certbotcertonly
-  namespace: certbot
-spec:
-  ttlSecondsAfterFinished: 100
-  template:
-    spec:
-      containers: 
-      - name: certbotcertonly
-        image: certbot/certbot:latest
-        command: ["certbot","certonly", "--non-interactive", "--agree-tos", "-m", "franckrobbin6@gmail.com", "--webroot", "--webroot-path", "/var/www/certbot/","-d", "echo.tryton.geeraert.eu"]
-        volumeMounts:
-        - name: certbot-www
-          mountPath: /var/www/certbot/
-        - name: certbot-conf
-          mountPath: /etc/letsencrypt/
-        - name: letsencrypt-log
-          mountPath: /var/log/letsencrypt/
-      volumes:
-      - name: certbot-www
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-      - name: certbot-conf
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
-      - name: letsencrypt-log
-        hostPath:
-          path: /var/log/letsencrypt/
-      restartPolicy: Never
-  backoffLimit: 4

Certbot_manual_renew_jobs.yaml.old

@@ -1,37 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: certbotrenew
-  namespace: certbot
-spec:
-  ttlSecondsAfterFinished: 100
-  template:
-    spec:
-      containers: 
-      - name: certbotrenew
-        image: certbot/certbot:latest
-        command: ["certbot","renew", "--non-interactive", "--agree-tos", "-m", "franckrobbin6@gmail.com", "--webroot", "--webroot-path", "/var/www/certbot/"]
-        volumeMounts:
-        - name: certbot-www
-          mountPath: /var/www/certbot/
-        - name: certbot-conf
-          mountPath: /etc/letsencrypt/
-        - name: letsencrypt-log
-          mountPath: /var/log/letsencrypt/
-      volumes:
-      - name: certbot-www
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-      - name: certbot-conf
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
-      - name: letsencrypt-log
-        hostPath:
-          path: /var/log/letsencrypt/
-      restartPolicy: Never
-  backoffLimit: 4

Certbot_manual_wildcart.yaml.old

@@ -1,46 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certbot
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: certbotwilcart
-  namespace: certbot
-spec:
-  ttlSecondsAfterFinished: 100
-  template:
-    spec:
-      containers: 
-      - name: certbotwildcart
-        image: certbot/dns-ovh:latest
-        command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.tryton.geeraert.eu"]
-        volumeMounts:
-        - name: certbot-www
-          mountPath: /var/www/certbot/
-        - name: certbot-conf
-          mountPath: /etc/letsencrypt/
-        - name: letsencrypt-log
-          mountPath: /var/log/letsencrypt/
-        - name: secret-ovh
-          mountPath: /secret/
-      volumes:
-      - name: certbot-www
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/www/
-      - name: certbot-conf
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
-      - name: letsencrypt-log
-        hostPath:
-          path: /var/log/letsencrypt/
-#      - name: secret-ovh
-#        hostPath:
-#          path: /opt/kubernetes/Certbot_jobs/ovh.ini
-#          type: File
-      - name: secret-ovh
-        secret:
-          secretName: ovh-secret-certbot
-      restartPolicy: Never
-  backoffLimit: 4

ovh.secret.yaml

@@ -5,3 +5,13 @@ kind: Secret
 metadata:
   creationTimestamp: null
   name: ovh-secret-certbot
+  namespace: certbot
+---
+apiVersion: v1
+data:
+  ovh.ini: IyBPVkggQVBJIGNyZWRlbnRpYWxzIHVzZWQgYnkgQ2VydGJvdApkbnNfb3ZoX2VuZHBvaW50ID0gb3ZoLWV1CmRuc19vdmhfYXBwbGljYXRpb25fa2V5ID0gJzk1MzAyOWU5MjY5OTM4M2InCmRuc19vdmhfYXBwbGljYXRpb25fc2VjcmV0ID0gJzBjNjg4NTRkY2Q2YmI4MjYxZjExZjgyYWIyMzE0ZDdlJwpkbnNfb3ZoX2NvbnN1bWVyX2tleSA9ICc4Y2M5Yzk2MjQxZDg1NDBhMjNmNjY1Mjg4ZWNiYzZhMScK
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: ovh-secret-certbot
+  namespace: reverse-proxy