SSL with Let's Encrypt to kubernetes secrets

Usage

---
kind: CronJob
apiVersion: batch/v1beta1
metadata:
  name: update-gate-ssl

spec:
  schedule: "0 0 * * 1"
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          containers:
          - name: updater
            image: zzzsochi/kubeacme
            args: ["--dns", "dns_dgon",
                   "-d", "zelenyak.name",
                   "-d", "*.zelenyak.name"]
            env:
            - name: KUBE_TOKEN
              valueFrom:
                secretKeyRef:
                  name: drone-token-kxbqc
                  key: token
            - name: KUBE_SECRET_NAME
              value: gate-ssl
            - name: DO_API_KEY
              valueFrom:
                secretKeyRef:
                  name: digitalocean
                  key: key
            - name: KUBEACME_POST_COMMAND
              value: kubectl get pod -l role=service -l app=gate -o 'jsonpath={range .items[*]}{.metadata.name}{"\n"}{end}' | xargs -I {POD} kubectl exec {POD} -c gate -- sh -c 'nginx -t && nginx -s reload'

/usr/local/bin/kubesetup

Setup kubectl. Need to set KUBE_TOKEN variable.

docker run -it --rm -e KUBE_TOKEN=$(kubectl get secret my-super-token -o jsonpath='{.data.token}') zzzsochi@kubeawsctl
kubesetup
kubectl get all

Variable KUBE_SERVER set the kubernetes server. Default: https://kubernetes.default.svc.cluster.local

/usr/local/bin/kubeacme

Need to set KUBE_SECRET_NAME. All arguments passed to acme.sh.

Reload nginx

KUBEACME_POST_COMMAND variable with command witch run after update certs.