[Skip-Ci] WIP Add generalized cert gen

src/main/cljc/dda/c4k_website/website.cljc

@@ -42,12 +42,12 @@
   (st/replace fqdn #"\." "-"))
 
 (defn generate-service-name
-  [name]
+  [uname]
-  (str (unique-name-from-fqdn name) "-service"))
+  (str (unique-name-from-fqdn uname) "-service"))
 
 (defn generate-cert-name
-  [name]
+  [uname]
-  (str (unique-name-from-fqdn name) "-cert"))
+  (str (unique-name-from-fqdn uname) "-cert"))
 
 ; ToDo: Move to common?
 (defn-spec replace-all-matching-subvalues-in-string-start pred/map-or-seq?
@@ -165,17 +165,11 @@
 
 (defn generate-website-certificate
   [config]
-  (let [{:keys [uname fqdns issuer]
+  (let [{:keys [fqdns]} config
-         :or {issuer "staging"}} config
+        spec-dnsNames [:spec :dnsNames]]
-        fqdn (first fqdns)
-        spec-dnsNames [:spec :dnsNames]
-        letsencrypt-issuer (name issuer)
-        cert-name (generate-cert-name uname)]
     (->
-     (yaml/load-as-edn "website/certificate.yaml")
+     (generate-common-certificate config)
-     (assoc-in [:spec :issuerRef :name] letsencrypt-issuer)
+     (assoc-in spec-dnsNames fqdns))))
-     (cm/replace-all-matching-values-by-new-value "CERTNAME" cert-name)
-     (cm/replace-all-matching-values-by-new-value "FQDN" fqdn))))
 
 (defn-spec generate-single-certificate pred/map-or-seq?
   [config config?]

src/main/resources/website/certificate.yaml

@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: CERTNAME
+  namespace: default
+spec:
+  secretName: CERTNAME
+  commonName: FQDN
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  dnsNames:
+  - FQDN
+  issuerRef:
+    name: staging
+    kind: ClusterIssuer
+    

src/main/resources/website/single-certificate.yaml

@@ -1,10 +1,10 @@
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
-  name: NAME-cert
+  name: CERTNAME
   namespace: default
 spec:
-  secretName: NAME-cert
+  secretName: CERTNAME
   commonName: FQDN
   duration: 2160h # 90d
   renewBefore: 360h # 15d

valid-config.edn

@@ -7,7 +7,7 @@
 
 {:issuer "staging"
  :websites
- [{:name "meissa.io"
+ [{:uname "meissa.io"
    :fqdns ["meissa.de" "meissa-gmbh.de" "www.meissa-gmbh.de"
            "www.meissa.de" "www.prod.meissa-gmbh.de" "www.prod.meissa.de"]
    :gitea-host "repo.prod.meissa.de"