Update example resource types

This commit is contained in:
James Munnelly 2017-07-21 15:18:53 +01:00
parent 95cba8ab5f
commit 479559d73c
2 changed files with 60 additions and 18 deletions

View File

@ -1,33 +1,63 @@
# Example ACME certificate using DNS # certificate resource request for google.com using letsencrypt issuer
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate kind: Certificate
metadata: metadata:
name: my-certificate name: production-crt
spec: spec:
secret: production-crt
issuer: letsencrypt-prod
domains: domains:
- www.google.com - www.google.com
acme: acme:
challenge: dns-01 http-01:
url: https://... # if the ingress resource already exists, we modify it to add our path
email: test@example.com # instead of creating our own ingress resource (to support gce). if this
dns: # is blank, a temporary ingress resource will be used
clouddns: {} ingress: google-com
# only required when
ingressClass: nginx
status: status:
state: Pending state: Pending
--- ---
# Example ACME certificate using Ingress # letsencrypt issuer resource
apiVersion: certmanager.kubernetes.io/v1 apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
name: letsencrypt-prod
spec:
acme:
url: https://letsencrypt-prod.org
email: james@jetstack.io
privateKey: james-letsencrypt-prod
status:
ready: true
---
# certificate resource request for google.com using letsencrypt issuer
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate kind: Certificate
metadata: metadata:
name: my-certificate name: vault-crt
spec: spec:
secret: vault-crt
issuer: vault-prod
domains: domains:
- www.google.com - www.yahoo.com
acme: vault:
challenge: http-01 role: serving
url: https://...
email: test@example.com
ingressRef:
name: something
status: status:
state: Pending state: Pending
---
# vault issuer resource
apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
name: vault-prod
spec:
vault:
url: https://vault.service.svc.cluster.local
path: pki/prod-ca/
credentials:
token:
secretName: vault-token
status:
ready: true

View File

@ -9,3 +9,15 @@ spec:
kind: Certificate kind: Certificate
plural: certificates plural: certificates
scope: Namespaced # Can also be cluster level using "Cluster" scope: Namespaced # Can also be cluster level using "Cluster"
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: issuers.certmanager.k8s.io
spec:
group: certmanager.k8s.io
version: v1alpha1
names:
kind: Issuer
plural: issuers
scope: Namespaced # Can also be cluster level using "Cluster"