provisioning-catalog/components/rev_proxy/cluster/templates/certificates.yaml.j2

23 lines
606 B
Text
Raw Normal View History

{% for site in taskserv.sites %}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: {{ taskserv.name }}-{{ site.domain | replace(from=".", to="-") }}-tls
namespace: {{ taskserv.namespace }}
labels:
app.kubernetes.io/name: {{ taskserv.name }}
app.kubernetes.io/managed-by: provisioning
spec:
secretName: {{ taskserv.name }}-{{ site.domain | replace(from=".", to="-") }}-tls
issuerRef:
name: {{ site.cluster_issuer }}
kind: ClusterIssuer
dnsNames:
- "{{ site.domain }}"
usages:
- server auth
- digital signature
- key encipherment
{% endfor %}