40 lines
1.3 KiB
YAML
40 lines
1.3 KiB
YAML
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: {{ .Values.global.issuerName }}
|
|
spec:
|
|
acme:
|
|
email: {{ .Values.global.email | quote }}
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
privateKeySecretRef:
|
|
name: {{ .Values.global.issuerName }}
|
|
solvers:
|
|
- dns01:
|
|
rfc2136:
|
|
nameserver: {{ .Values.global.rfc2136.nameserver | quote }}
|
|
tsigKeyName: {{ .Values.global.rfc2136.tsigKeyName | quote }}
|
|
tsigAlgorithm: {{ .Values.global.rfc2136.tsigAlgorithm | quote }}
|
|
tsigSecretSecretRef:
|
|
name: {{ .Values.global.rfc2136.tsigSecretName | quote }}
|
|
key: {{ .Values.global.rfc2136.tsigSecretKey | quote }}
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: {{ .Values.global.ssl_secret_name }}
|
|
namespace: {{ .Values.global.namespace }}
|
|
spec:
|
|
secretName: {{ .Values.global.ssl_secret_name }}
|
|
secretTemplate:
|
|
annotations:
|
|
replicator.v1.mittwald.de/replication-allowed: "true"
|
|
replicator.v1.mittwald.de/replicate-to: "{{ .Values.global.replicatorNamespaces }}"
|
|
issuerRef:
|
|
name: {{ .Values.global.issuerName }}
|
|
kind: ClusterIssuer
|
|
commonName: {{ .Values.global.domain | quote }}
|
|
dnsNames:
|
|
- {{ .Values.global.domain | quote }}
|
|
- "*.{{ .Values.global.domain }}"
|
|
|