feat: move certs

Signed-off-by: Benjamin Ritter <benjamin.ritter@x-cellent.com>

Author: l0wl3vel

files/certs/default-gateway/server.json files/certs/metal-api/server.jsonfiles/certs/default-gateway/server.json renamed to files/certs/metal-api/server.json

@@ -1,5 +1,5 @@
 {
-  "CN": "default-gateway",
+  "CN": "metal-api",
   "hosts": [
     "api.172.42.0.42.nip.io",
     "v2.api.172.42.0.42.nip.io"

roles/gateway/tasks/main.yml

@@ -17,18 +17,18 @@
 - name: Deploy metal-control-plane EnvoyProxy
   kubernetes.core.k8s:
     definition: "{{ lookup('template', 'envoyproxy.yaml') | from_yaml }}"
-- name: Deploy default-tls certificate secret
+- name: Deploy metal-api certificate secret
   kubernetes.core.k8s:
     definition:
       apiVersion: v1
       kind: Secret
       type: kubernetes.io/tls
       metadata:
-        name: default-tls
+        name: metal-api-tls
         namespace: "{{ gateway_namespace }}"
       data:
-        tls.crt: "{{ lookup('file', 'certs/default-gateway/server.pem') | b64encode }}"
-        tls.key: "{{ lookup('file', 'certs/default-gateway/server-key.pem') | b64encode }}"
+        tls.crt: "{{ lookup('file', 'certs/metal-api/server.pem') | b64encode }}"
+        tls.key: "{{ lookup('file', 'certs/metal-api/server-key.pem') | b64encode }}"
 - name: Deploy metal-control-plane Gateway
   kubernetes.core.k8s:
     definition: "{{ lookup('template', 'gateway.yaml') | from_yaml }}"

roles/gateway/templates/gateway.yaml

@@ -27,7 +27,7 @@ spec:
       certificateRefs:
         - group: ""
           kind: Secret
-          name: default-tls
+          name: metal-api-tls
 {% for name, port in gateway_tcp_listeners.items() %}
   - protocol: TCP
     name: {{ name }}

scripts/roll_certs.sh

@@ -14,7 +14,7 @@ rm *.csr
 for component in \
         grpc \
         masterdata-api \
-        default-gateway; do
+        metal-api; do
     pushd $component
 
     echo "generating $component certs"