Azure AKS cert-manager - hello-kubernetes helmfile.yaml

helmfile.yaml

repositories:
  - name: itscontained
    url: https://charts.itscontained.io
releases:
  - name: hello-kubernetes
    namespace: hello
    chart: itscontained/raw
    version: 0.2.5
    values:
      - resources:
          - apiVersion: apps/v1
            kind: Deployment
            metadata:
              name: hello-kubernetes
            spec:
              replicas: 3
              selector:
                matchLabels:
                  app: hello-kubernetes
              template:
                metadata:
                  labels:
                    app: hello-kubernetes
                spec:
                  containers:
                  - name: hello-kubernetes-basic
                    image: paulbouwer/hello-kubernetes:1.10
                    ports:
                      - containerPort: 8080
                    resources:
                      requests:
                        memory: "64Mi"
                        cpu: "80m"
                      limits:
                        memory: "128Mi"
                        cpu: "250m"
                    env:
                      - name: KUBERNETES_NAMESPACE
                        valueFrom:
                          fieldRef:
                            fieldPath: metadata.namespace
                      - name: KUBERNETES_NODE_NAME
                        valueFrom:
                          fieldRef:
                            fieldPath: spec.nodeName

          - apiVersion: v1
            kind: Service
            metadata:
              name: hello-kubernetes
            spec:
              type: NodePort
              ports:
              - port: 80
                targetPort: 8080
              selector:
                app: hello-kubernetes

          - apiVersion: networking.k8s.io/v1
            kind: Ingress
            metadata:
              name: hello-kubernetes
              annotations:
                kubernetes.io/ingress.class: nginx
                cert-manager.io/cluster-issuer: {{ requiredEnv "ACME_ISSUER" }}
            spec:
              tls:
                - hosts:
                    - hello.{{ requiredEnv "AZ_DNS_DOMAIN" }}
                  secretName: tls-secret
              rules:
              - host: hello.{{ requiredEnv "AZ_DNS_DOMAIN" }}
                http:
                  paths:
                  - backend:
                      service:
                        name: hello-kubernetes
                        port:
                          number: 80
                    path: /
                    pathType: ImplementationSpecific