update

Makefile

@@ -49,6 +49,9 @@ kind:
 chisel:
 	./scripts/k8s-chisel-operator.sh
 
+clean:
+	./packages/infra/vultr-delete-orphaned-resources.js
+
 deps:
 	sudo pamac install make entr nvm minikube kubectl docker helm expect
 	curl -fsSL https://raw.githubusercontent.com/tilt-dev/tilt/master/scripts/install.sh | bash

README.md

@@ -4,3 +4,9 @@ See ./ARCHITECTURE.md for overview
 
 Code for https://futureporn.net
 
+## Jun update todo list
+
+* [ ] bunny support for external-dns 
+* [ ] traefik well understood
+* [ ] staging test with *.futureporn.net domains
+

charts/fp/templates/certresolver.yaml.old

@@ -0,0 +1,15 @@
+# acme.caserver: "{{ .Values.letsencrypt.caServer }}"
+
+
+## traefik certresolver
+---
+
+# acme.caserver: "{{ .Values.letsencrypt.caServer }}"
+## staging
+https://acme-staging-v02.api.letsencrypt.org/directory
+
+
+
+---
+## production
+https://acme-v02.api.letsencrypt.org/directory

charts/fp/templates/next.yaml

@@ -65,7 +65,7 @@ metadata:
   namespace: futureporn
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: http
-    traefik.ingress.kubernetes.io/router.tls: true
+    traefik.ingress.kubernetes.io/router.tls: "true"
     traefik.ingress.kubernetes.io/tls.certresolver: "{{ .Values.next.certResolver }}"
     kubernetes.io/ingress.class: traefik
     cert-manager.io/cluster-issuer: "{{ .Values.next.certIssuer }}"

charts/fp/values-dev.yaml

@@ -7,6 +7,7 @@ next:
   imageName: fp/next
   certIssuer: letsencrypt-staging
   hostname: next.futureporn.svc.cluster.local
+  ingressClassName: traefik
 capture:
   imageName: fp/capture
 scout:
@@ -33,6 +34,4 @@ realtime:
   imageName: fp/realtime
 adminEmail: cj@futureporn.net
 chisel:
-  exitNodeIp: "155.138.254.201"
+  exitNodeIp: "155.138.254.201"
-letsencrypt:
-  caServer: https://acme-staging-v02.api.letsencrypt.org/directory