Files
gitops-infra/infrastructure/cert-manager/cluster-issuer.yaml
infinicaretech 056f5fd493 Switch PubMEDIS to pubmedis.com with Let's Encrypt TLS
Replace nip.io hosts with pubmedis.com domain and add
letsencrypt-prod ClusterIssuer for automated certificate management.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-05 16:40:27 +00:00

47 lines
930 B
YAML

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: selfsigned-issuer
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: infinicaretech-ca
namespace: cert-manager
spec:
isCA: true
commonName: infinicaretech-ca
secretName: infinicaretech-ca-secret
privateKey:
algorithm: ECDSA
size: 256
issuerRef:
name: selfsigned-issuer
kind: ClusterIssuer
group: cert-manager.io
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: infinicaretech-ca-issuer
spec:
ca:
secretName: infinicaretech-ca-secret
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: info@pubmedis.com
privateKeySecretRef:
name: letsencrypt-prod-key
solvers:
- http01:
ingress:
class: nginx