hive-apps/resources/manifests/clusterissuer.yaml

36 lines
1.1 KiB
YAML

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt
namespace: cert-manager
spec:
acme:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
email: nold@gnu.one
#server: https://acme-staging-v02.api.letsencrypt.org/directory
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
# Secret resource that will be used to store the account's private key.
name: issuer-account-key
# Add a single challenge solver, HTTP01 using nginx
solvers:
- dns01:
cnameStrategy: Follow
cloudflare:
apiTokenSecretRef:
name: cloudflare-api
key: CF_API_TOKEN
#- http01:
# ingress:
# class: ingress-external-traefik
# ingressTemplate:
# metadata:
# labels:
# environment: external
# annotations:
# traefik.ingress.kubernetes.io/frontend-entry-points: "web"
# kubernetes.io/ingress.class: ingress-external