|
|
@@ -9,6 +9,29 @@ spec:
|
|
9
|
9
|
privateKeySecretRef:
|
|
10
|
10
|
name: staging-issuer-account-key
|
|
11
|
11
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
|
12
|
+ solvers:
|
|
|
13
|
+ - http01:
|
|
|
14
|
+ ingress:
|
|
|
15
|
+ class: traefik
|
|
|
16
|
+ ingressTemplate:
|
|
|
17
|
+ metadata:
|
|
|
18
|
+ annotations:
|
|
|
19
|
+ "kubernetes.io/ingress.class": "traefik"
|
|
|
20
|
+ "traefik.ingress.kubernetes.io/router.tls": "true"
|
|
|
21
|
+ "traefik.ingress.kubernetes.io/frontend-entry-points": "https"
|
|
|
22
|
+ selector: {}
|
|
|
23
|
+---
|
|
|
24
|
+apiVersion: cert-manager.io/v1
|
|
|
25
|
+kind: ClusterIssuer
|
|
|
26
|
+metadata:
|
|
|
27
|
+ name: letsencrypt-prod
|
|
|
28
|
+ namespace: cert-manager
|
|
|
29
|
+spec:
|
|
|
30
|
+ acme:
|
|
|
31
|
+ email: simon.kaiser@gmx.net # replace this
|
|
|
32
|
+ privateKeySecretRef:
|
|
|
33
|
+ name: prod-issuer-account-key
|
|
|
34
|
+ server: https://acme-v02.api.letsencrypt.org/directory
|
|
12
|
35
|
solvers:
|
|
13
|
36
|
- http01:
|
|
14
|
37
|
ingress:
|