27dee33bfd
This reverts commit 813bdd3614d13cc6bacbf0846c139d8f6da027af. Reason for revert: This commit was done to avoid duplication of certmanager across all clusterctl components. However with the current notion of maintaining the upstream version as is, this change should be reverted. Also there is WIP to implement cert-manager as a standalone component even before clusterctl tries to deploy its embedded certmanager. So this commit will avoid manipulating the override in the standalone certmanager component Change-Id: I16b0b002da990eb3f070f69d025cb904f7ef9e27
25 lines
743 B
YAML
25 lines
743 B
YAML
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
|
# More document can be found at https://docs.cert-manager.io
|
|
apiVersion: cert-manager.io/v1alpha2
|
|
kind: Issuer
|
|
metadata:
|
|
name: selfsigned-issuer
|
|
namespace: system
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
apiVersion: cert-manager.io/v1alpha2
|
|
kind: Certificate
|
|
metadata:
|
|
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
|
namespace: system
|
|
spec:
|
|
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
|
dnsNames:
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
|
issuerRef:
|
|
kind: Issuer
|
|
name: selfsigned-issuer
|
|
secretName: $(SERVICE_NAME)-cert
|