Edge Ingress Automation

Highlights:

  • Automated DNS records via ExternalDNS
  • ACME certs via cert-manager, renewals hands-free
  • Cloudflare Tunnel for secure egress without open ports
sequenceDiagram participant Dev as Git participant CD as ArgoCD participant K8s as Cluster Dev->>CD: Push ingress change CD->>K8s: Sync manifests K8s->>CF: ExternalDNS creates records K8s->>ACME: cert-manager issues/renews