use letsencrypt staging

Makefile

@@ -28,8 +28,8 @@ tilt:
 	tilt up
 
 secrets:
-	kubectl delete secret link2cid --ignore-not-found
+	kubectl --namespace futureporn delete secret link2cid --ignore-not-found
-	kubectl create secret generic link2cid \
+	kubectl --namespace futureporn create secret generic link2cid \
 	--from-literal=apiKey=${LINK2CID_API_KEY}
 
 	kubectl --namespace cert-manager delete secret vultr --ignore-not-found
@@ -40,22 +40,22 @@ secrets:
 	kubectl --namespace windmill create secret generic vultr \
 	--from-literal=apiKey=${VULTR_API_KEY}
 
-	kubectl delete secret vultr --ignore-not-found
+	kubectl --namespace futureporn delete secret vultr --ignore-not-found
-	kubectl create secret generic vultr \
+	kubectl --namespace futureporn create secret generic vultr \
 	--from-literal=containerRegistryUsername=${VULTR_CONTAINER_REGISTRY_USERNAME} \
 	--from-literal=apiKey=${VULTR_API_KEY}
 
-	kubectl delete secret postgres --ignore-not-found
+	kubectl --namespace futureporn delete secret postgres --ignore-not-found
-	kubectl create secret generic postgres \
+	kubectl --namespace futureporn create secret generic postgres \
 	--from-literal=password=${POSTGRES_PASSWORD}
 
-	kubectl delete secret pgadmin --ignore-not-found
+	kubectl --namespace futureporn delete secret pgadmin --ignore-not-found
-	kubectl create secret generic pgadmin \
+	kubectl --namespace futureporn create secret generic pgadmin \
 	--from-literal=defaultEmail=${PGADMIN_DEFAULT_EMAIL} \
 	--from-literal=defaultPassword=${PGADMIN_DEFAULT_PASSWORD}
 
-	kubectl delete secret strapi --ignore-not-found
+	kubectl --namespace futureporn delete secret strapi --ignore-not-found
-	kubectl create secret generic strapi \
+	kubectl --namespace futureporn create secret generic strapi \
 	--from-literal=adminJwtSecret=${STRAPI_ADMIN_JWT_SECRET} \
 	--from-literal=apiTokenSalt=${STRAPI_API_TOKEN_SALT} \
 	--from-literal=appKeys=${STRAPI_APP_KEYS} \

apps/base/podinfo/release.yaml

@@ -27,7 +27,7 @@ spec:
       className: "nginx"
       annotations:
         kubernetes.io/ingress.class: "nginx"
-        cert-manager.io/cluster-issuer: "letsencrypt-staging"
+        cert-manager.io/cluster-issuer: "letsencrypt"
         nginx.ingress.kubernetes.io/ssl-redirect: "true"
       hosts:
         - host: podinfo.sbtp.xyz
@@ -38,5 +38,3 @@ spec:
        - secretName: podinfo-tls
          hosts:
            - podinfo.sbtp.xyz
-
-           

clusters/production/infrastructure.yaml

@@ -35,7 +35,7 @@ spec:
     - patch: |
         - op: replace
           path: /spec/acme/server
-          value: https://acme-v02.api.letsencrypt.org/directory
+          value: https://acme-staging-v02.api.letsencrypt.org/directory
       target:
         kind: ClusterIssuer
         name: letsencrypt