hive-apps/resources/manifests/clusterissuer.yaml

29 lines
998 B
YAML

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt
namespace: cert-manager
spec:
acme:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
email: nold@gnu.one
#server: https://acme-staging-v02.api.letsencrypt.org/directory
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
# Secret resource that will be used to store the account's private key.
name: issuer-account-key
# Add a single challenge solver, HTTP01 using nginx
solvers:
- http01:
ingress:
class: ingress-external-traefik
ingressTemplate:
metadata:
labels:
environment: external
annotations:
traefik.ingress.kubernetes.io/frontend-entry-points: "web"
kubernetes.io/ingress.class: ingress-external