Skip to content
Snippets Groups Projects
Commit 3426a7de authored by OZGCloud's avatar OZGCloud
Browse files

OZG-3276 OZG-3318 add issuer; renaming

parent 06e49b73
No related branches found
No related tags found
No related merge requests found
...@@ -21,6 +21,15 @@ ...@@ -21,6 +21,15 @@
# Die sprachspezifischen Genehmigungen und Beschränkungen # Die sprachspezifischen Genehmigungen und Beschränkungen
# unter der Lizenz sind dem Lizenztext zu entnehmen. # unter der Lizenz sind dem Lizenztext zu entnehmen.
# #
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: user-manager-issuer
namespace: {{ include "app.namespace" . }}
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
kind: Issuer kind: Issuer
metadata: metadata:
...@@ -28,15 +37,15 @@ metadata: ...@@ -28,15 +37,15 @@ metadata:
namespace: {{ include "app.namespace" . }} namespace: {{ include "app.namespace" . }}
spec: spec:
ca: ca:
secretName: user-manager-tls secretName: user-manager-ca-cert
--- ---
apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
kind: Certificate kind: Certificate
metadata: metadata:
name: user-manager-ca-cert name: user-manager-tls-certificate
namespace: {{ include "app.namespace" . }} namespace: {{ include "app.namespace" . }}
spec: spec:
secretName: user-manager-tls secretName: user-manager-tls-cert
issuerRef: issuerRef:
name: user-manager-ca-issuer name: user-manager-ca-issuer
kind: Issuer kind: Issuer
...@@ -158,18 +167,18 @@ spec: ...@@ -158,18 +167,18 @@ spec:
terminationMessagePolicy: File terminationMessagePolicy: File
tty: true tty: true
volumeMounts: volumeMounts:
- name: user-manager-tls - name: user-manager-tls-certificate
mountPath: "/user-manager-tls/tls.crt" mountPath: "/user-manager-tls-certificate/tls.crt"
subPath: tls.crt subPath: tls.crt
readOnly: true readOnly: true
- name: user-manager-tls - name: user-manager-tls-certificate
mountPath: "/user-manager-tls/tls.key" mountPath: "/user-manager-tls-certificate/tls.key"
subPath: tls.key subPath: tls.key
readOnly: true readOnly: true
volumes: volumes:
- name: user-manager-tls - name: user-manager-tls-certificate
secret: secret:
secretName: user-manager-tls secretName: user-manager-tls-certificate
dnsConfig: {} dnsConfig: {}
dnsPolicy: ClusterFirst dnsPolicy: ClusterFirst
imagePullSecrets: imagePullSecrets:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment