Blog

We will use Let’s Encrypt to obtain a staging certificate. Ensure that you update the cert-manager and certificat manifests with your email information and the DNS names you intend to use.

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
   name: letsencrypt-staging-01
spec:
   acme:
     email: chahid.ks.hamza@gmail.com
     server: https://acme-staging-v02.api.letsencrypt.org/directory
     privateKeySecretRef:
        name: letsencrypt-staging-issuer-account-key-01
     solvers:
     - http01:
        ingress:
         ingressClassName: ingress-nginx
##
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
     name: staging-devops4u-tech
spec:
    secretName: stagingdevops4u-tech-tls
    dnsNames:
       - "devops4u-tech.lkhabir.com"
    issuerRef:
       name: letsencrypt-staging-01
       kind: ClusterIssuer

Next, we will create a public IP address to associate with our load balancer, which will handle all ingress traffic. We will also set up a DNS record to link the application’s domain to this load balancer.

resource "azurerm_dns_zone" "ingress-public" {
       name = local.dns-name
       resource_group_name = local.aks-resources-rg
}
resource "azurerm_dns_a_record" "ingress-public-A-record" {
       depends_on = [azurerm_kubernetes_cluster.k8s, azurerm_public_ip.lbic_pip]
       name = local.ingress-name
       zone_name = azurerm_dns_zone.ingress-public.name
       resource_group_name = local.aks-resources-rg
       ttl = 3600
       records = [azurerm_public_ip.lbic_pip.ip_address]
}
resource "azurerm_public_ip" "lbic_pip" {
       depends_on = [local.aks-resources-nrg]       
       name = "loadbalancer-ingressController-pip"
       location = local.aks-rg-location
       resource_group_name = local.aks-resources-nrg
       allocation_method = "Static"
       sku = "Standard"
}
resource "helm_release" "ingress_nginx_controller" {
       depends_on = [azurerm_kubernetes_cluster.k8s,azurerm_public_ip.lbic_pip]
       name = local.nginx-ingress-name
       repository = "https://kubernetes.github.io/ingress-nginx"
       chart = "ingress-nginx"
       namespace = "ingress"
      create_namespace = true
      values = [
          templatefile("./ingress-controller/values.yml",
         { pip_rg_name = local.aks-resources-nrg }
    )
     ]
      set {
       name = "controller.service.loadBalancerIP"
       value = azurerm_public_ip.lbic_pip.ip_address
}
      lifecycle {
       create_before_destroy = false
   }
}