29 lines
562 B
YAML
29 lines
562 B
YAML
|
# Private CA for internal services: issuer "hexor-lab".
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: ClusterIssuer
|
||
|
|
metadata:
|
||
|
|
name: selfsigned
|
||
|
|
spec:
|
||
|
|
selfSigned: {}
|
||
|
|
---
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: Certificate
|
||
|
|
metadata:
|
||
|
|
name: hexor-ca-root
|
||
|
|
namespace: cert-manager
|
||
|
|
spec:
|
||
|
|
isCA: true
|
||
|
|
duration: 87600h # 10y
|
||
|
|
commonName: hexor-ca
|
||
|
|
secretName: hexor-ca-root-secret
|
||
|
|
issuerRef:
|
||
|
|
name: selfsigned
|
||
|
|
kind: ClusterIssuer
|
||
|
|
---
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: ClusterIssuer
|
||
|
|
metadata:
|
||
|
|
name: hexor-lab
|
||
|
|
spec:
|
||
|
|
ca:
|
||
|
|
secretName: hexor-ca-root-secret
|