timthesinner

---
apiVersion: v1
kind: Secret
metadata:
  name: cluster-issuer-secret
  namespace: kube-system
data:
  secret-access-key: <AWS_ACCESS_KEY>
type: Opaque
---

timthesinner

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "list",
            "Effect": "Allow",
            "Action": "route53:ListHostedZones",
            "Resource": "*"
        },
        {

timthesinner

apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: wildcard-ingress-cert
  namespace: kube-system
spec:
  dnsNames:
  - '*.<ROOT_DOMAIN>'
  issuerRef:
    kind: ClusterIssuer

timthesinner

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    certmanager.k8s.io/acme-challenge-type: dns01
    certmanager.k8s.io/acme-dns01-provider: route53
    certmanager.k8s.io/cluster-issuer: lets-encrypt-issuer-prod
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
  name: secured-service

timthesinner

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: external-kibana
  namespace: logging
  annotations:
    certmanager.k8s.io/acme-challenge-type: dns01
    certmanager.k8s.io/acme-dns01-provider: route53
    certmanager.k8s.io/cluster-issuer: lets-encrypt-issuer-prod

timthesinner

apiVersion: v1
kind: Service
metadata:
  name: external-kibana
  namespace: logging
spec:
  ports:
  - name: https
    port: 443
    protocol: TCP

timthesinner

// Making some assumptions that we are using word press and PHP

add_action( 'rest_api_init', 'create_custom_route' );
function create_custom_route() {
  register_rest_route( 'custom/v1', '/template', array(
    'methods' => 'GET',
    'callback' => 'custom_caas_html_callback',
  ));
}