27dee33bfd
This reverts commit 813bdd3614.
Reason for revert: This commit was done to avoid duplication of certmanager across all clusterctl components. However with the current notion of maintaining the upstream version as is, this change should be reverted. Also there is WIP to implement cert-manager as a standalone component even before clusterctl tries to deploy its embedded certmanager. So this commit will avoid manipulating the override in the standalone certmanager component
Change-Id: I16b0b002da990eb3f070f69d025cb904f7ef9e27
26 lines
941 B
YAML
26 lines
941 B
YAML
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
|
# More document can be found at https://docs.cert-manager.io
|
|
# WARNING: Targets CertManager 0.11 check https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html for breaking changes
|
|
apiVersion: cert-manager.io/v1alpha2
|
|
kind: Issuer
|
|
metadata:
|
|
name: selfsigned-issuer
|
|
namespace: system
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
apiVersion: cert-manager.io/v1alpha2
|
|
kind: Certificate
|
|
metadata:
|
|
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
|
namespace: system
|
|
spec:
|
|
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
|
dnsNames:
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
|
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
|
issuerRef:
|
|
kind: Issuer
|
|
name: selfsigned-issuer
|
|
secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
|