update

infra/argocd/templates/argocd.yaml

@@ -62,3 +62,18 @@ spec:
           scheme: https
   tls:
     secretName: argocd-tls
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: longhorn-tls
+spec:
+  secretName: longhorn-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: "argocd.infra.durp.info"
+  dnsNames:
+    - "argocd.infra.durp.info"

infra/vault/templates/ingress.yaml

@@ -16,3 +16,18 @@ spec:
       scheme: https
   tls:
     secretName: vault-tls  
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: longhorn-tls
+spec:
+  secretName: longhorn-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: "vault.infra.durp.info"
+  dnsNames:
+    - "vault.infra.durp.info"

infra/vault/values.yaml

@@ -134,7 +134,7 @@ vault:
   
   # Vault UI
   ui:
-    enabled: true
+    enabled: false
     serviceType: "LoadBalancer"
     serviceNodePort: null
     externalPort: 8200