1# The following manifests contain a self-signed issuer CR and a certificate CR.
2# More document can be found at https://docs.cert-manager.io
3# WARNING: Targets CertManager v1.0. Check https://cert-manager.io/docs/installation/upgrading/ for breaking changes.
4apiVersion: cert-manager.io/v1
5kind: Issuer
6metadata:
7 name: selfsigned-issuer
8 namespace: system
9spec:
10 selfSigned: {}
11---
12apiVersion: cert-manager.io/v1
13kind: Certificate
14metadata:
15 name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
16 namespace: system
17spec:
18 # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
19 dnsNames:
20 - SERVICE_NAME.SERVICE_NAMESPACE.svc
21 - SERVICE_NAME.SERVICE_NAMESPACE.svc.cluster.local
22 issuerRef:
23 kind: Issuer
24 name: selfsigned-issuer
25 secretName: webhook-server-cert # this secret will not be prefixed, since it's not managed by kustomize
View as plain text