jordan/rdev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Use cluster-issuer for TLS certs in project deploys

Browse Source 
The deployer was using cert-manager.io/issuer (namespace-scoped)
referencing letsencrypt-threesix which only exists in the threesix
namespace. Projects deploy to the projects namespace, so changed to
cert-manager.io/cluster-issuer with letsencrypt-prod.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
jordan 2026-01-29 01:29:34 -07:00
parent aa6fa4ebdf
commit 4c41bc3a3f
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/rdev-api/config.go
View File

@ -105,7 +105,7 @@ func loadConfig() Config {
CloudflareZoneID: os.Getenv("CLOUDFLARE_ZONE_ID"), CloudflareZoneID: os.Getenv("CLOUDFLARE_ZONE_ID"),
DefaultDomain: getEnv("DEFAULT_DOMAIN", "threesix.ai"), DefaultDomain: getEnv("DEFAULT_DOMAIN", "threesix.ai"),
DeployNamespace: getEnv("DEPLOY_NAMESPACE", "projects"), DeployNamespace: getEnv("DEPLOY_NAMESPACE", "projects"),
DeployTLSIssuer: getEnv("DEPLOY_TLS_ISSUER", "letsencrypt-threesix"), DeployTLSIssuer: getEnv("DEPLOY_TLS_ISSUER", "letsencrypt-prod"),
ClusterIP: getEnv("CLUSTER_IP", "208.122.204.172"), ClusterIP: getEnv("CLUSTER_IP", "208.122.204.172"),
RegistryURL: getEnv("REGISTRY_URL", "zot.threesix.svc.cluster.local:5000"), RegistryURL: getEnv("REGISTRY_URL", "zot.threesix.svc.cluster.local:5000"),
WoodpeckerURL: getEnv("WOODPECKER_URL", "https://ci.threesix.ai"), WoodpeckerURL: getEnv("WOODPECKER_URL", "https://ci.threesix.ai"),

2
internal/adapter/deployer/resources.go
View File

@ -200,7 +200,7 @@ func (d *Deployer) createOrUpdateIngress(ctx context.Context, spec domain.Deploy
annotations := map[string]string{} annotations := map[string]string{}
if d.config.TLSIssuer != "" { if d.config.TLSIssuer != "" {
annotations["cert-manager.io/issuer"] = d.config.TLSIssuer annotations["cert-manager.io/cluster-issuer"] = d.config.TLSIssuer
} }
ingress := d.buildIngress(spec, ns, pathType, ingressClass, tlsSecretName, annotations) ingress := d.buildIngress(spec, ns, pathType, ingressClass, tlsSecretName, annotations)