deploy/baremetal-operator/base/certmanager/certificate.yaml

   1 # The following manifests contain a self-signed issuer CR and a certificate CR.
   2 # More document can be found at https://docs.cert-manager.io
   3 # WARNING: Targets CertManager 0.11 check https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html for
   4 # breaking changes
   5 apiVersion: cert-manager.io/v1
   6 kind: Issuer
   7 metadata:
   8   name: selfsigned-issuer
   9   namespace: system
  10 spec:
  11   selfSigned: {}
  12 ---
  13 apiVersion: cert-manager.io/v1
  14 kind: Certificate
  15 metadata:
  16   name: serving-cert  # this name should match the one appeared in kustomizeconfig.yaml
  17   namespace: system
  18 spec:
  19   # $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
  20   dnsNames:
  21   - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
  22   - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
  23   issuerRef:
  24     kind: Issuer
  25     name: selfsigned-issuer
  26   secretName: bmo-webhook-server-cert # this secret will not be prefixed, since it's not managed by kustomize