32 lines
1011 B
YAML
32 lines
1011 B
YAML
{{- if .Values.clusterIssuer.enabled }}
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: {{ .Values.clusterIssuer.name }}
|
|
labels:
|
|
{{- include "cert-manager-stack.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: issuer
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "2"
|
|
spec:
|
|
acme:
|
|
# ACME server URL (Let's Encrypt)
|
|
server: {{ .Values.clusterIssuer.server }}
|
|
|
|
# Email address for ACME registration and expiration notifications
|
|
email: {{ .Values.clusterIssuer.email }}
|
|
|
|
# Name of the secret used to store the ACME account private key
|
|
privateKeySecretRef:
|
|
name: {{ .Values.clusterIssuer.privateKeySecretRef.name }}
|
|
|
|
# DNS-01 challenge solver using Cloudflare
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: {{ .Values.clusterIssuer.dns01.cloudflare.apiTokenSecretRef.name }}
|
|
key: {{ .Values.clusterIssuer.dns01.cloudflare.apiTokenSecretRef.key }}
|
|
{{- end }}
|