Fix indentation
This commit is contained in:
parent
3477d1d379
commit
a35faff22c
@ -35,53 +35,55 @@ cert-manager:
|
|||||||
cpu: 100m
|
cpu: 100m
|
||||||
memory: 128Mi
|
memory: 128Mi
|
||||||
|
|
||||||
extraObjects:
|
|
||||||
- apiVersion: cert-manager.io/v1
|
|
||||||
kind: ClusterIssuer
|
|
||||||
metadata:
|
|
||||||
name: selfsigned-issuer
|
|
||||||
spec:
|
|
||||||
selfSigned: {}
|
|
||||||
|
|
||||||
# CA Certificate (acts as root CA)
|
|
||||||
- apiVersion: cert-manager.io/v1
|
extraObjects:
|
||||||
kind: Certificate
|
- apiVersion: cert-manager.io/v1
|
||||||
metadata:
|
kind: ClusterIssuer
|
||||||
name: selfsigned-ca
|
metadata:
|
||||||
namespace: cert-manager
|
|
||||||
spec:
|
|
||||||
isCA: true
|
|
||||||
commonName: noxxos.nl
|
|
||||||
secretName: selfsigned-ca-secret
|
|
||||||
privateKey:
|
|
||||||
algorithm: ECDSA
|
|
||||||
size: 256
|
|
||||||
issuerRef:
|
|
||||||
name: selfsigned-issuer
|
name: selfsigned-issuer
|
||||||
kind: ClusterIssuer
|
spec:
|
||||||
|
selfSigned: {}
|
||||||
|
|
||||||
# CA ClusterIssuer (uses the CA cert above)
|
# CA Certificate (acts as root CA)
|
||||||
- apiVersion: cert-manager.io/v1
|
- apiVersion: cert-manager.io/v1
|
||||||
kind: ClusterIssuer
|
kind: Certificate
|
||||||
metadata:
|
metadata:
|
||||||
name: ca-issuer
|
name: selfsigned-ca
|
||||||
spec:
|
namespace: cert-manager
|
||||||
ca:
|
spec:
|
||||||
|
isCA: true
|
||||||
|
commonName: noxxos.nl
|
||||||
secretName: selfsigned-ca-secret
|
secretName: selfsigned-ca-secret
|
||||||
|
privateKey:
|
||||||
|
algorithm: ECDSA
|
||||||
|
size: 256
|
||||||
|
issuerRef:
|
||||||
|
name: selfsigned-issuer
|
||||||
|
kind: ClusterIssuer
|
||||||
|
|
||||||
# Wildcard certificate for *.noxxos.nl
|
# CA ClusterIssuer (uses the CA cert above)
|
||||||
- apiVersion: cert-manager.io/v1
|
- apiVersion: cert-manager.io/v1
|
||||||
kind: Certificate
|
kind: ClusterIssuer
|
||||||
metadata:
|
metadata:
|
||||||
name: wildcard-noxxos-nl
|
|
||||||
namespace: cert-manager
|
|
||||||
spec:
|
|
||||||
secretName: wildcard-noxxos-nl-tls
|
|
||||||
issuerRef:
|
|
||||||
name: ca-issuer
|
name: ca-issuer
|
||||||
kind: ClusterIssuer
|
spec:
|
||||||
dnsNames:
|
ca:
|
||||||
- "*.noxxos.nl"
|
secretName: selfsigned-ca-secret
|
||||||
- "noxxos.nl"
|
|
||||||
duration: 2160h # 90 days
|
# Wildcard certificate for *.noxxos.nl
|
||||||
renewBefore: 360h # 15 days
|
- apiVersion: cert-manager.io/v1
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: wildcard-noxxos-nl
|
||||||
|
namespace: cert-manager
|
||||||
|
spec:
|
||||||
|
secretName: wildcard-noxxos-nl-tls
|
||||||
|
issuerRef:
|
||||||
|
name: ca-issuer
|
||||||
|
kind: ClusterIssuer
|
||||||
|
dnsNames:
|
||||||
|
- "*.noxxos.nl"
|
||||||
|
- "noxxos.nl"
|
||||||
|
duration: 2160h # 90 days
|
||||||
|
renewBefore: 360h # 15 days
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user