ce7cb702218693d08ea6d83464d2457c9250027c

vendor/platform/vault/certificate.yaml

@@ -0,0 +1,25 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: vault-server
+  namespace: vault
+spec:
+  secretName: vault-server-tls
+  issuerRef:
+    name: vault-internal
+    kind: ClusterIssuer
+  dnsNames:
+    - vault.quorate.internal
+    - vault.vault.svc.cluster.local
+    - vault-active.vault.svc.cluster.local
+    - vault-active-direct.vault.svc.cluster.local
+    - vault-internal.vault.svc.cluster.local
+    - "*.vault-internal.vault.svc.cluster.local"
+  duration: 2160h
+  renewBefore: 360h
+  privateKey:
+    algorithm: ECDSA
+    size: 256
+    rotationPolicy: Always
+  usages:
+    - server auth