istio.io/istio@v0.0.0-20240520182934-d79c90f27776/samples/bookinfo/platform/kube/bookinfo-certificate.yaml (about)

     1  ---
     2  apiVersion: certmanager.k8s.io/v1alpha1
     3  kind: ClusterIssuer
     4  metadata:
     5    name: letsencrypt-staging
     6    namespace: istio-system
     7  spec:
     8    acme:
     9      # The ACME server URL
    10      server: https://acme-staging-v02.api.letsencrypt.org/directory
    11      # Email address used for ACME registration
    12      email: stage@istio.io
    13      # Name of a secret used to store the ACME account private key
    14      privateKeySecretRef:
    15        name: letsencrypt-staging
    16      # Enable the HTTP-01 challenge provider
    17      http01: {}
    18  ---
    19  apiVersion: certmanager.k8s.io/v1alpha1
    20  kind: Certificate
    21  metadata:
    22    name: istio-ingressgateway-certs
    23    namespace: istio-system
    24  spec:
    25    secretName: istio-ingressgateway-certs
    26    issuerRef:
    27      name: letsencrypt-staging
    28      kind: ClusterIssuer
    29    commonName: bookinfo.example.com
    30    dnsNames:
    31    - bookinfo.example.com
    32    acme:
    33      config:
    34      - http01:
    35          ingressClass: none
    36        domains:
    37        - bookinfo.example.com