mrwho
0112ca70ed
Add self-signed ClusterIssuer and test Certificate deployment to cert_manager role for verifying cert-manager functionality, while refactoring uyuni role to use self-signed issuer locally instead of external Let's Encrypt references and introduce database credential secrets generation.
28 lines
508 B
Django/Jinja
28 lines
508 B
Django/Jinja
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: test-certificate
|
|
namespace: default
|
|
spec:
|
|
secretName: test-certificate-secret
|
|
duration: 2160h
|
|
renewBefore: 360h
|
|
subject:
|
|
organizations:
|
|
- Test Org
|
|
isCA: false
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
size: 256
|
|
usages:
|
|
- server auth
|
|
- client auth
|
|
dnsNames:
|
|
- test.local.mrwho.ru
|
|
- "*.test.local.mrwho.ru"
|
|
issuerRef:
|
|
name: self-signed-issuer
|
|
kind: ClusterIssuer
|
|
group: cert-manager.io
|