WIP: apiserver-cert

infobloxopen · May 4, 2022 · e066d9e · e066d9e
1 parent f6582a2
commit e066d9e
Showing 1 changed file with 32 additions and 0 deletions.
diff --git a/helm-charts/konk/templates/apiserver-cert.yaml b/helm-charts/konk/templates/apiserver-cert.yaml
@@ -0,0 +1,32 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: {{ include "konk.fullname" . }}-apiserver-ca
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "konk.labels" . | nindent 4 }}
+spec:
+ ca:
+   secretName: {{ include "konk.fullname" . }}-apiserver-ca
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ include "konk.fullname" . }}-apiserver-cert
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "konk.labels" . | nindent 4 }}
+spec:
+  secretName: {{ include "konk.fullname" . }}-apiserver-cert
+  commonName: {{ include "konk.fullname" . }}
+  dnsNames:
+  - {{ include "konk.fullname" . }}-apiserver
+  - {{ include "konk.fullname" . }}
+  - {{ include "konk.fullname" . }}.{{ .Release.Namespace }}
+  - {{ include "konk.fullname" . }}.{{ .Release.Namespace }}.svc
+  - {{ include "konk.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
+  issuerRef:
+    name: {{ include "konk.fullname" . }}-apiserver-ca
+    kind: Issuer
+  revisionHistoryLimit: 1
+...