-
Notifications
You must be signed in to change notification settings - Fork 8
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
update charts/cert-manager-webhook-acmesh and readme
- Loading branch information
1 parent
013d643
commit 8fe5c8e
Showing
2 changed files
with
68 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,67 @@ | ||
| ### cert-manager-webhook-acmesh | ||
|
|
||
| > A cert-manager webhook built on top of acme.sh | ||
| > Status: WIP | ||
| ### Usage | ||
|
|
||
| > Install | ||
| ```bash | ||
| # add infinity-server repo | ||
| helm repo add infinity-server https://infinity-server.github.io/dockerset | ||
| # update repo | ||
| helm repo update | ||
| # install chart | ||
| helm upgrade --install \ | ||
| cert-manager-webhook-acmesh infinity-server/cert-manager-webhook-acmesh \ | ||
| --namespace cert-manager \ | ||
| --create-namespace \ | ||
| -f ./cert-manager-webhook-acmesh.values.yml | ||
| ``` | ||
|
|
||
| ```yaml | ||
| # cert-manager-webhook-acmesh.values.yml, use dnspod(dns_dp) for example | ||
| clusterIssuer: | ||
| name: acmesh-dnspod | ||
| staging: false | ||
| enabled: true | ||
| ttl: 600 | ||
| dnsapi: "dns_dp" # same as acme.sh --dns parameter | ||
| env: # same as acme.sh dnsapi environments | ||
| - "DP_Id=123456" | ||
| - "DP_Key=ajsdhflasjhdflahsd" | ||
| ``` | ||
| > Usage | ||
| ```yaml | ||
| --- | ||
| # secret for receive certificate contents | ||
| apiVersion: v1 | ||
| kind: Secret | ||
| metadata: | ||
| name: tls-certs | ||
| namespace: cert-manager | ||
| type: kubernetes.io/tls | ||
| data: | ||
| tls.crt: "" | ||
| tls.key: "" | ||
|
|
||
| # a certificate resource | ||
| --- | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Certificate | ||
| metadata: | ||
| name: dnspod-demo-certificate | ||
| namespace: cert-manager | ||
| spec: | ||
| secretName: tls-certs | ||
| issuerRef: | ||
| kind: ClusterIssuer | ||
| name: acmesh-dnspod | ||
| dnsNames: | ||
| - "test.dosk.host" | ||
| - "*.test.dosk.host" | ||
| ``` |