Initial commit

infrastructure/istio/manifests/edge/edge.yaml

@@ -0,0 +1,78 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: istio-kube-huskypup-net
+  namespace: istio-system
+spec:
+  secretName: istio-kube-huskypup-net
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-production
+  dnsNames:
+    - auth.kube.huskypup.net
+    - grafana.kube.huskypup.net
+    - prometheus.kube.huskypup.net
+    - vault.kube.huskypup.net
+    - mqtt.kube.huskypup.net
+    - ceph.kube.huskypup.net
+    - kiali.kube.huskypup.net
+    - argocd.kube.huskypup.net
+    - n8n.kube.huskypup.net
+    - nextcloud.kube.huskypup.net
+    - teslamate.kube.huskypup.net
+    - homeassistant.kube.huskypup.net
+    - esphome.kube.huskypup.net
+    - frigate.kube.huskypup.net
+    - guacamole.kube.huskypup.net
+    - gitlab.kube.huskypup.net
+    - registry.gitlab.kube.huskypup.net
+    - minio.gitlab.kube.huskypup.net
+    - kas.kube.huskypup.net
+    - everest.kube.huskypup.net
+    - rancher.kube.huskypup.net
+    - netbird.kube.huskypup.net
+    - nessus.kube.huskypup.net
+    - scylla-manager.kube.huskypup.net
+
+---
+apiVersion: networking.istio.io/v1beta1
+kind: Gateway
+metadata:
+  name: edge
+  namespace: istio-system
+spec:
+  selector:
+    istio: ingressgateway
+  servers:
+    - port:
+        number: 443
+        name: https
+        protocol: HTTPS
+      hosts:
+        - auth.kube.huskypup.net
+        - grafana.kube.huskypup.net
+        - prometheus.kube.huskypup.net
+        - vault.kube.huskypup.net
+        - mqtt.kube.huskypup.net
+        - ceph.kube.huskypup.net
+        - kiali.kube.huskypup.net
+        - argocd.kube.huskypup.net
+        - n8n.kube.huskypup.net
+        - nextcloud.kube.huskypup.net
+        - teslamate.kube.huskypup.net
+        - homeassistant.kube.huskypup.net
+        - esphome.kube.huskypup.net
+        - frigate.kube.huskypup.net
+        - guacamole.kube.huskypup.net
+        - gitlab.kube.huskypup.net
+        - registry.gitlab.kube.huskypup.net
+        - minio.gitlab.kube.huskypup.net
+        - kas.kube.huskypup.net
+        - everest.kube.huskypup.net
+        - rancher.kube.huskypup.net
+        - netbird.kube.huskypup.net
+        - nessus.kube.huskypup.net
+        - scylla-manager.kube.huskypup.net
+      tls:
+        mode: SIMPLE
+        credentialName: istio-kube-huskypup-net