Added cert-manager

2025-04-06 00:37:15 +01:00
parent 69e01aaa92
commit a7cf18563d
5 changed files with 78 additions and 51 deletions
--- a/k8s/core/cert-manager/issuer.yaml
+++ b/k8s/core/cert-manager/issuer.yaml
@ -0,0 +1,39 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: k8s-master@hexor.cy
+    privateKeySecretRef:
+      name: tls-secret
+    solvers:
+      - dns01:
+          cloudflare:
+            email: ultradesu@hexor.ru
+            apiKeySecretRef:
+              name: cloudflare-api-key-secret
+              key: apiKey
+        selector:
+          dnsZones:
+            - "*.hexor.cy"
+            - "*.hexor.ru"
+            - "*.btwiusearch.net"
+            - "hexor.ru"
+            - "hexor.cy"
+            - "btwiusearch.net"
+      - dns01:
+          route53:
+            region: eu-north-1
+            accessKeyIDSecretRef:
+              name: aws-api-key-secret
+              key: accessKey
+            secretAccessKeySecretRef:
+              name: aws-api-key-secret
+              key: secretKey
+        selector:
+          dnsZones:
+            - "of.hexor.cy"
+