35 lines
882 B
YAML
35 lines
882 B
YAML
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: vault-internal
|
|
spec:
|
|
vault:
|
|
path: pki_int/sign/cert-manager
|
|
server: https://vault-active-tls.vault.svc.cluster.local:443
|
|
serverName: vault-active-direct.vault.svc.cluster.local
|
|
caBundleSecretRef:
|
|
name: vault-root-ca
|
|
key: ca.crt
|
|
auth:
|
|
kubernetes:
|
|
role: cert-manager
|
|
mountPath: /v1/auth/kubernetes
|
|
serviceAccountRef:
|
|
name: cert-manager
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: [email protected]
|
|
privateKeySecretRef:
|
|
name: letsencrypt-account-key
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: api-token
|