25 lines
604 B
YAML
25 lines
604 B
YAML
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: Certificate
|
||
|
|
metadata:
|
||
|
|
name: vault-server
|
||
|
|
namespace: vault
|
||
|
|
spec:
|
||
|
|
secretName: vault-server-tls
|
||
|
|
issuerRef:
|
||
|
|
name: vault-internal
|
||
|
|
kind: ClusterIssuer
|
||
|
|
dnsNames:
|
||
|
|
- vault.quorate.internal
|
||
|
|
- vault.vault.svc.cluster.local
|
||
|
|
- vault-active.vault.svc.cluster.local
|
||
|
|
- vault-active-direct.vault.svc.cluster.local
|
||
|
|
- vault-internal.vault.svc.cluster.local
|
||
|
|
- "*.vault-internal.vault.svc.cluster.local"
|
||
|
|
duration: 2160h
|
||
|
|
renewBefore: 360h
|
||
|
|
privateKey:
|
||
|
|
algorithm: ECDSA
|
||
|
|
size: 256
|
||
|
|
rotationPolicy: Always
|
||
|
|
usages:
|
||
|
|
- server auth
|