Explorar el Código

Cloudcone issuer

Administrator hace 4 meses
padre
commit
dcf02d5ed6
Se han modificado 3 ficheros con 20 adiciones y 44 borrados
  1. 0 26
      certificate/01-certificate.yaml
  2. 9 0
      certificate/01-secret.yaml
  3. 11 18
      certificate/02-issuer.yaml

+ 0 - 26
certificate/01-certificate.yaml Ver fichero

@@ -1,26 +0,0 @@
1
-apiVersion: cert-manager.io/v1
2
-kind: Certificate
3
-metadata:
4
-  name: secure-lahelicevespotco
5
-  namespace: default
6
-spec:
7
-  secretName: secure-lahelicevespotco-tls
8
-  duration: 2160h # 90d
9
-  renewBefore: 360h # 15d
10
-  subject:
11
-    organizations:
12
-      - lahelicevespotco
13
-  isCA: false
14
-  privateKey:
15
-    algorithm: RSA
16
-    encoding: PKCS1
17
-    size: 2048
18
-  usages:
19
-    - server auth
20
-    - client auth
21
-  dnsNames:
22
-    - lahelice.vespot.co
23
-  issuerRef:
24
-    name: letsencrypt-prod
25
-    kind: ClusterIssuer
26
-    group: cert-manager.io

+ 9 - 0
certificate/01-secret.yaml Ver fichero

@@ -0,0 +1,9 @@
1
+---
2
+apiVersion: v1
3
+kind: Secret
4
+metadata:
5
+  name: cloudcone-api-token-secret
6
+  namespace: cert-manager
7
+type: Opaque
8
+data:
9
+  api-token: w8W4f622cBL7uwhj

+ 11 - 18
certificate/02-issuer.yaml Ver fichero

@@ -1,24 +1,17 @@
1
+---
1 2
 apiVersion: cert-manager.io/v1
2
-kind: Issuer
3
+kind: ClusterIssuer
3 4
 metadata:
4
-  name: letsencrypt
5
+  name: cloudcone-clusterissuer
5 6
 spec:
6 7
   acme:
7
-    # The ACME server URL
8
-    server: https://acme-v02.api.letsencrypt.org/directory 
9
-    # https://acme-v02.api.letsencrypt.org/directory ORIGINAL
10
-    # https://acme-staging-v02.api.letsencrypt.org/directory TESTS
11
-    email: jbaquero@vespot.com
12
-    # Name of a secret used to store the ACME account private key
8
+    email: baquerojorge@gmail.com  # <-- Replace with your email address
9
+    server: https://acme-v02.api.letsencrypt.org/directory
13 10
     privateKeySecretRef:
14
-      name: letsencrypt
11
+      name: cloudcone-clusterissuer-account-key
15 12
     solvers:
16
-    - dns01:
17
-        webhook:
18
-          groupName: acme.bwolf.me
19
-          solverName: gandi
20
-          config:
21
-            apiKeySecretRef:
22
-              key: api-token
23
-              name: gandi-credentials1
24
-              namespace: glpi-one
13
+      - dns01:
14
+          cloudcone:
15
+            apiTokenSecretRef:
16
+              name: cloudcone-api-token-secret
17
+              key: api-token