switch to a GKE initiated managedcertificate

deploy/deployctl/subcommands/ingress_production.py

@@ -99,6 +99,7 @@ def apply_ingress(browser_deployment: str = None, reads_deployment: str = None,
         kubectl(["apply", "-f", os.path.join(manifests_directory(), "gnomad.backendconfig.yaml")])
         kubectl(["apply", "-f", os.path.join(manifests_directory(), "gnomad.frontendconfig.yaml")])
         kubectl(["apply", "-f", os.path.join(manifests_directory(), "gnomad.ingress.yaml")])
+        kubectl(["apply", "-f", os.path.join(manifests_directory(), "gnomad.managedcertificate.yaml")])
 
 
 def main(argv: typing.List[str]) -> None:

deploy/manifests/ingress/gnomad.ingress.yaml

@@ -6,7 +6,8 @@ metadata:
     tier: production
   annotations:
     kubernetes.io/ingress.global-static-ip-name: gnomad-prod-global-ip
-    ingress.gcp.kubernetes.io/pre-shared-cert: gnomad-browser-cert
+    networking.gke.io/managed-certificates: gnomad-prod-certificate
+    ingress.gcp.kubernetes.io/pre-shared-cert: gnomad-browser-cert # TODO: remove this after new cert is provisioned
     networking.gke.io/v1beta1.FrontendConfig: 'gnomad-frontend-config'
 spec:
   rules:

deploy/manifests/ingress/gnomad.managedcertificate.yaml

@@ -0,0 +1,9 @@
+apiVersion: networking.gke.io/v1
+kind: ManagedCertificate
+metadata:
+  name: gnomad-prod-certificate
+  labels:
+    tier: production
+spec:
+  domains:
+    - gnomad.broadinstitute.org

pyproject.toml

@@ -1,6 +1,9 @@
 [tool.black]
 line-length = 120
 
+[tool.ruff]
+line-length = 120
+
 [tool.pylint.basic]
 # ds: frequently used name for a variable containing a Hail table
 good-names = [