Remove spire ingress as it complicate SNI acme

Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent 1e5e84439b
commit 31bce3b09e
6 changed files with 38 additions and 48 deletions
@@ -39,14 +39,19 @@ oidc:
  logLevel: INFO

  service:
-    type: ClusterIP
+    type: NodePort
    port: 80
+    annotations: {}
+      # external-dns.alpha.kubernetes.io/hostname: oidc-discovery.example.org

-  ingress:
-    enabled: false
-    domain: "oidc-discovery.example.org"
+  domain: "oidc-discovery.example.org"

-  letsEncrypt:
+  allowInsecureScheme: false
+
+  acme:
+    tosAccepted: false
+    cacheDir: /run/spire
+    directoryUrl: https://acme-v02.api.letsencrypt.org/directory
    emailAddress: [email protected]

 agent: