michalpenka

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ing-helloworld
  namespace: helloworld
  annotations: 
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec:
  tls:

michalpenka

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ing-helloworld
  namespace: helloworld
  annotations: 
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: "letsencrypt-staging"
spec:
  tls:

michalpenka

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: michal@helloworld.com
    privateKeySecretRef:
      name: letsencrypt-prod

michalpenka

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: michal@helloworld.com
    privateKeySecretRef:
      name: letsencrypt-staging

michalpenka

apiVersion: v1
kind: Namespace
metadata:
  name: cert-manager

michalpenka

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ing-helloworld
  namespace: helloworld
  annotations: 
    kubernetes.io/ingress.class: "nginx"
spec:
  rules:
  - host: www.helloworld.local

michalpenka

apiVersion: v1
kind: Service
metadata:
  name: ingress-nginx
  namespace: ingress-nginx
  labels:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
spec:
  type: LoadBalancer

michalpenka

sed -i -e \
   's/quay.io\/kubernetes-ingress-controller\/nginx-ingress-controller:0.30.0/quay.io\/kubernetes-ingress-controller\/nginx-ingress-controller-arm64:0.30.0/g' \
   mandatory.yaml

michalpenka

apiVersion: v1
kind: ConfigMap
metadata:
  namespace: metallb-system
  name: config
data:
  config: |
    address-pools:
      - name: default
        protocol: layer2

michalpenka

kubectl -n helloworld describe service svc-helloworld