inecs
a3ce2d473c
Ship Proxmox, oVirt, VMware, and OpenStack behind one Postgres stack, Makefile helpers (up/clean/helm up|down/push), and a Helm chart with namespace, Let's Encrypt ingresses, migrate inits, and skip-if-seeded jobs.
43 lines
1.4 KiB
YAML
43 lines
1.4 KiB
YAML
{{- if and .Values.certManager.enabled .Values.certManager.createClusterIssuer }}
|
|
{{- $solverClass := .Values.certManager.solverIngressClassName | default "nginx" }}
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: {{ .Values.certManager.issuerName }}
|
|
labels:
|
|
{{- include "lab.labels" . | nindent 4 }}
|
|
spec:
|
|
acme:
|
|
email: {{ required "certManager.email is required when createClusterIssuer=true" .Values.certManager.email | quote }}
|
|
server: {{ .Values.certManager.server | quote }}
|
|
privateKeySecretRef:
|
|
name: {{ printf "%s-account-key" .Values.certManager.issuerName }}
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
{{- if $solverClass }}
|
|
ingressClassName: {{ $solverClass }}
|
|
{{- end }}
|
|
---
|
|
{{- if .Values.certManager.createStagingIssuer }}
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: {{ .Values.certManager.stagingIssuerName }}
|
|
labels:
|
|
{{- include "lab.labels" . | nindent 4 }}
|
|
spec:
|
|
acme:
|
|
email: {{ .Values.certManager.email | quote }}
|
|
server: {{ .Values.certManager.stagingServer | quote }}
|
|
privateKeySecretRef:
|
|
name: {{ printf "%s-account-key" .Values.certManager.stagingIssuerName }}
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
{{- if $solverClass }}
|
|
ingressClassName: {{ $solverClass }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|