sboardwell

$ kubectl -n kube-system get certificates
NAME                                              READY   SECRET                                                AGE
jxing-nginx-ingress-controller-wildcard-prod      True    jxing-nginx-ingress-controller-wildcard-prod-tls      5d
jxing-nginx-ingress-controller-wildcard-staging   True    jxing-nginx-ingress-controller-wildcard-staging-tls   11d

sboardwell

{
rm -rf /tmp/kr/kubernetes-replicator
mkdir -p /tmp/kr/kubernetes-replicator
(cd /tmp/kr/kubernetes-replicator && git clone --depth 1 --branch v1.0.0 [email protected]:mittwald/kubernetes-replicator.git .)
(cd /tmp/kr/kubernetes-replicator && helm upgrade --install --namespace kubernetes-replicator kubernetes-replicator ./deploy/helm-chart/kubernetes-replicator)
kubectl get all -n kubernetes-replicator
}

sboardwell

add_certificates() {
  local envType=$1
  local secretName ns
  kubectl apply -f <(sops -d cert-manager-utils/01-clouddns-service-account.yaml)
  kubectl apply -f <(sops -d cert-manager-utils/01-cloudflare-api-key.yaml)
  kubectl apply -f cert-manager-utils/02-clusterissuer-${envType}.yaml
  kubectl apply -f cert-manager-utils/03-cluster-certificate-${envType}.yaml

  # get the secret name
  secretName=$(cat cert-manager-utils/03-cluster-certificate-${envType}.yaml | docker run -i --rm evns/yq yq -r '.spec.secretName')

sboardwell

#!/usr/bin/env bash

# http://redsymbol.net/articles/unofficial-bash-strict-mode/
set -euo pipefail


function cleanUp() {
    local exitCode=$?
    [ $exitCode -ne 0 ] && echo "ERROR: The script is exiting with an error. Please check the logs above."
    [ -f "${myJceZip:-}" ] && echo "CLEANUP: Cleaning up jce zip..." && rm -f "${myJceZip}"