2020-07-26 21:47:24 +00:00
|
|
|
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
|
|
|
|
# More document can be found at https://docs.cert-manager.io
|
2022-03-20 07:11:05 +00:00
|
|
|
# WARNING: Targets CertManager 1.7
|
|
|
|
|
apiVersion: cert-manager.io/v1
|
2020-07-26 21:47:24 +00:00
|
|
|
kind: Issuer
|
|
|
|
|
metadata:
|
|
|
|
|
name: selfsigned-issuer
|
|
|
|
|
namespace: system
|
|
|
|
|
spec:
|
|
|
|
|
selfSigned: {}
|
|
|
|
|
---
|
2022-03-20 07:11:05 +00:00
|
|
|
apiVersion: cert-manager.io/v1
|
2020-07-26 21:47:24 +00:00
|
|
|
kind: Certificate
|
|
|
|
|
metadata:
|
|
|
|
|
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
|
|
|
|
namespace: system
|
|
|
|
|
spec:
|
|
|
|
|
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
|
|
|
|
dnsNames:
|
|
|
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
|
|
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
|
|
|
|
issuerRef:
|
|
|
|
|
kind: Issuer
|
|
|
|
|
name: selfsigned-issuer
|
|
|
|
|
secretName: webhook-server-cert # this secret will not be prefixed, since it's not managed by kustomize
|
