Michael DiLeo
7327d77dcd
Add the redacted source file for demo purposes Reviewed-on: https://source.michaeldileo.org/michael_dileo/Keybard-Vagabond-Demo/pulls/1 Co-authored-by: Michael DiLeo <michael_dileo@proton.me> Co-committed-by: Michael DiLeo <michael_dileo@proton.me>
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
---
|
|
# Self-signed CA for metrics server (for internal cluster communication)
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: metrics-server-selfsigned-issuer
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
# CA Certificate for metrics server
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: metrics-server-ca
|
|
namespace: metrics-server-system
|
|
spec:
|
|
secretName: metrics-server-ca-secret
|
|
commonName: "metrics-server-ca"
|
|
isCA: true
|
|
issuerRef:
|
|
name: metrics-server-selfsigned-issuer
|
|
kind: ClusterIssuer
|
|
---
|
|
# CA Issuer using the generated CA
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Issuer
|
|
metadata:
|
|
name: metrics-server-ca-issuer
|
|
namespace: metrics-server-system
|
|
spec:
|
|
ca:
|
|
secretName: metrics-server-ca-secret
|
|
---
|
|
# TLS Certificate for metrics server
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: metrics-server-certs
|
|
namespace: metrics-server-system
|
|
spec:
|
|
secretName: metrics-server-certs
|
|
issuerRef:
|
|
name: metrics-server-ca-issuer
|
|
kind: Issuer
|
|
commonName: metrics-server
|
|
dnsNames:
|
|
- metrics-server
|
|
- metrics-server.metrics-server-system
|
|
- metrics-server.metrics-server-system.svc
|
|
- metrics-server.metrics-server-system.svc.cluster.local
|