From 479559d73c1093a81609b596885f07168703f89d Mon Sep 17 00:00:00 2001 From: James Munnelly Date: Fri, 21 Jul 2017 15:18:53 +0100 Subject: [PATCH] Update example resource types --- docs/certificate.yaml | 66 +++++++++++++++++++++++++++++++------------ docs/crd.yaml | 12 ++++++++ 2 files changed, 60 insertions(+), 18 deletions(-) diff --git a/docs/certificate.yaml b/docs/certificate.yaml index ed4c92482..57f717195 100644 --- a/docs/certificate.yaml +++ b/docs/certificate.yaml @@ -1,33 +1,63 @@ -# Example ACME certificate using DNS +# certificate resource request for google.com using letsencrypt issuer apiVersion: certmanager.k8s.io/v1alpha1 kind: Certificate metadata: - name: my-certificate + name: production-crt spec: + secret: production-crt + issuer: letsencrypt-prod domains: - www.google.com acme: - challenge: dns-01 - url: https://... - email: test@example.com - dns: - clouddns: {} + http-01: + # if the ingress resource already exists, we modify it to add our path + # instead of creating our own ingress resource (to support gce). if this + # is blank, a temporary ingress resource will be used + ingress: google-com + # only required when + ingressClass: nginx status: state: Pending --- -# Example ACME certificate using Ingress -apiVersion: certmanager.kubernetes.io/v1 +# letsencrypt issuer resource +apiVersion: certmanager.k8s.io/v1alpha1 +kind: Issuer +metadata: + name: letsencrypt-prod +spec: + acme: + url: https://letsencrypt-prod.org + email: james@jetstack.io + privateKey: james-letsencrypt-prod +status: + ready: true +--- +# certificate resource request for google.com using letsencrypt issuer +apiVersion: certmanager.k8s.io/v1alpha1 kind: Certificate metadata: - name: my-certificate + name: vault-crt spec: + secret: vault-crt + issuer: vault-prod domains: - - www.google.com - acme: - challenge: http-01 - url: https://... - email: test@example.com - ingressRef: - name: something + - www.yahoo.com + vault: + role: serving status: - state: Pending \ No newline at end of file + state: Pending +--- +# vault issuer resource +apiVersion: certmanager.k8s.io/v1alpha1 +kind: Issuer +metadata: + name: vault-prod +spec: + vault: + url: https://vault.service.svc.cluster.local + path: pki/prod-ca/ + credentials: + token: + secretName: vault-token +status: + ready: true diff --git a/docs/crd.yaml b/docs/crd.yaml index 51d92e976..8340e8347 100644 --- a/docs/crd.yaml +++ b/docs/crd.yaml @@ -9,3 +9,15 @@ spec: kind: Certificate plural: certificates scope: Namespaced # Can also be cluster level using "Cluster" +--- +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: issuers.certmanager.k8s.io +spec: + group: certmanager.k8s.io + version: v1alpha1 + names: + kind: Issuer + plural: issuers + scope: Namespaced # Can also be cluster level using "Cluster"