38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: certbotwilcard
|
|
namespace: reverse-proxy
|
|
spec:
|
|
schedule: "0 0 */15 * *"
|
|
jobTemplate:
|
|
spec:
|
|
backoffLimit: 4
|
|
ttlSecondsAfterFinished: 100
|
|
template:
|
|
spec:
|
|
nodeName: kube-master
|
|
containers:
|
|
- name: certbotwildcard
|
|
image: certbot/dns-ovh:latest
|
|
command: ["certbot","certonly","--dns-ovh","--dns-ovh-credentials","/secret/ovh.ini","--dns-ovh-propagation-seconds","60","-d","*.tryton.geeraert.eu"]
|
|
volumeMounts:
|
|
- name: reverse-proxy-ssl
|
|
mountPath: /etc/letsencrypt/
|
|
- name: letsencrypt-log
|
|
mountPath: /var/log/letsencrypt/
|
|
- name: secret-ovh
|
|
mountPath: /secret/
|
|
volumes:
|
|
- name: reverse-proxy-ssl
|
|
persistentVolumeClaim:
|
|
claimName: reverse-proxy-ssl
|
|
- name: letsencrypt-log
|
|
hostPath:
|
|
path: /var/log/letsencrypt/
|
|
- name: secret-ovh
|
|
secret:
|
|
secretName: ovh-secret-certbot
|
|
restartPolicy: Never
|
|
|