sigs.k8s.io/cluster-api@v1.7.1/controlplane/kubeadm/config/certmanager/certificate.yaml (about)

     1  # The following manifests contain a self-signed issuer CR and a certificate CR.
     2  # More document can be found at https://docs.cert-manager.io
     3  # WARNING: Targets CertManager 0.11 check https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html for breaking changes
     4  apiVersion: cert-manager.io/v1
     5  kind: Issuer
     6  metadata:
     7    name: selfsigned-issuer
     8    namespace: system
     9  spec:
    10    selfSigned: {}
    11  ---
    12  apiVersion: cert-manager.io/v1
    13  kind: Certificate
    14  metadata:
    15    name: serving-cert  # this name should match the one appeared in kustomizeconfig.yaml
    16    namespace: system
    17  spec:
    18    # $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
    19    dnsNames:
    20    - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
    21    - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
    22    issuerRef:
    23      kind: Issuer
    24      name: selfsigned-issuer
    25    secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
    26    subject:
    27      organizations:
    28        - k8s-sig-cluster-lifecycle