chris/k8s-playground
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

issuer

Browse source
This commit is contained in:
chris 2019-05-20 13:37:13 +02:00
parent 0549f40afd
commit 838734f7a9
3 changed files with 35 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -84,7 +84,9 @@ http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-da
### create issuers
....
adapt email!
kubectl apply -f letsencrypt-staging.yaml
kubectl apply -f letsencrypt-prod.yaml
### default issuer

16
letsencrypt-prod.yaml Normal file
View file

@ -0,0 +1,16 @@
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
name: letsencrypt
spec:
acme:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
email: sysadm@zknt.org
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
# Secret resource used to store the account's private key.
name: leprod-issuer-account-key
# Enable the HTTP01 challenge mechanism for this Issuer
http01: {}

16
letsencrypt-staging.yaml Normal file
View file

@ -0,0 +1,16 @@
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
email: sysadm@zknt.org
server: https://acme-staging-v02.api.letsencrypt.org/directory
privateKeySecretRef:
# Secret resource used to store the account's private key.
name: lestaging-issuer-account-key
# Enable the HTTP01 challenge mechanism for this Issuer
http01: {}