35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
apiVersion: certmanager.k8s.io/v1alpha1
|
|
kind: Issuer
|
|
metadata:
|
|
name: letsencrypt-prod
|
|
spec:
|
|
acme:
|
|
# The ACME server URL
|
|
server: https://acme-v01.api.letsencrypt.org/directory
|
|
# Email address used for ACME registration
|
|
email: user@example.com
|
|
# Name of a secret used to store the ACME account private key
|
|
privateKeySecretRef:
|
|
name: letsencrypt-prod
|
|
# Enable the HTTP-01 challenge provider
|
|
http01: {}
|
|
# ACME dns-01 provider configurations
|
|
dns01:
|
|
# Here we define a list of DNS-01 providers that can solve DNS challenges
|
|
providers:
|
|
- name: prod-dns
|
|
clouddns:
|
|
# A secretKeyRef to a the google cloud json service account
|
|
serviceAccountSecretRef:
|
|
name: clouddns-service-account
|
|
key: service-account.json
|
|
# The project in which to update the DNS zone
|
|
project: gcloud-prod-project
|
|
- name: cf-dns
|
|
cloudflare:
|
|
email: user@example.com
|
|
# A secretKeyRef to a cloudflare api key
|
|
apiKeySecretRef:
|
|
name: cloudflare-api-key
|
|
key: api-key.txt
|