38 lines
951 B
YAML
38 lines
951 B
YAML
---
|
|
apiVersion: certmanager.k8s.io/v1alpha1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-staging
|
|
namespace: istio-system
|
|
spec:
|
|
acme:
|
|
# The ACME server URL
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
# Email address used for ACME registration
|
|
email: stage@istio.io
|
|
# Name of a secret used to store the ACME account private key
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging
|
|
# Enable the HTTP-01 challenge provider
|
|
http01: {}
|
|
---
|
|
apiVersion: certmanager.k8s.io/v1alpha1
|
|
kind: Certificate
|
|
metadata:
|
|
name: istio-ingressgateway-certs
|
|
namespace: istio-system
|
|
spec:
|
|
secretName: istio-ingressgateway-certs
|
|
issuerRef:
|
|
name: letsencrypt-staging
|
|
kind: ClusterIssuer
|
|
commonName: bookinfo.example.com
|
|
dnsNames:
|
|
- bookinfo.example.com
|
|
acme:
|
|
config:
|
|
- http01:
|
|
ingressClass: none
|
|
domains:
|
|
- bookinfo.example.com
|