feat: NetworkSecurity | use cloudflare cert for internal services
This commit is contained in:
@@ -10,7 +10,7 @@ import {
|
|||||||
TLSOptions,
|
TLSOptions,
|
||||||
} from "./traefik";
|
} from "./traefik";
|
||||||
import { ValkeyCluster } from "./valkey";
|
import { ValkeyCluster } from "./valkey";
|
||||||
import { InternalIngressRoute, PrivateCertificate } from "../utils";
|
import { CloudflareCertificate, InternalIngressRoute } from "../utils";
|
||||||
|
|
||||||
export class NetworkSecurity extends TerraformStack {
|
export class NetworkSecurity extends TerraformStack {
|
||||||
constructor(scope: Construct, id: string) {
|
constructor(scope: Construct, id: string) {
|
||||||
@@ -87,7 +87,7 @@ export class NetworkSecurity extends TerraformStack {
|
|||||||
sourceRanges: ["192.168.18.0/24", "10.42.0.0/16"],
|
sourceRanges: ["192.168.18.0/24", "10.42.0.0/16"],
|
||||||
});
|
});
|
||||||
|
|
||||||
new PrivateCertificate(this, "longhorn-cert", {
|
new CloudflareCertificate(this, "longhorn-cert", {
|
||||||
provider: kubernetes,
|
provider: kubernetes,
|
||||||
namespace: "longhorn-system",
|
namespace: "longhorn-system",
|
||||||
name: "longhorn-ui",
|
name: "longhorn-ui",
|
||||||
@@ -106,7 +106,7 @@ export class NetworkSecurity extends TerraformStack {
|
|||||||
tlsSecretName: "longhorn-tls",
|
tlsSecretName: "longhorn-tls",
|
||||||
});
|
});
|
||||||
|
|
||||||
new PrivateCertificate(this, "grafana-cert", {
|
new CloudflareCertificate(this, "grafana-cert", {
|
||||||
provider: kubernetes,
|
provider: kubernetes,
|
||||||
namespace: "monitoring",
|
namespace: "monitoring",
|
||||||
name: "grafana-ui",
|
name: "grafana-ui",
|
||||||
|
|||||||
Reference in New Issue
Block a user