You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/docs/usage/ingress.md
+12-12Lines changed: 12 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -53,26 +53,26 @@ spec:
53
53
54
54
## Supported Annotations
55
55
56
-
You can specify the following annotations on Ingress resources in order to
57
-
trigger Certificate resources to be automatically created:
56
+
You can specify the following annotations on `Ingress` resources in order to
57
+
trigger `Certificate` resources to be automatically created:
58
58
59
59
- `cert-manager.io/issuer`: the name of the Issuer that should issue the
60
-
certificate required for this Ingress.
60
+
certificate required for this `Ingress`.
61
61
62
62
> ⚠️ This annotation does _not_ assume a namespace scoped issuer. It will
63
-
default to cert-manager.ioIssuer, however in case of external issuer types,
63
+
default to `cert-manager.io` `Issuer`, however in case of external issuer types,
64
64
this should be used for both namespaced and cluster scoped issuer types.
65
65
66
66
> ⚠️ If a namespace scoped issuer is used then the issuer *must* be in
67
-
the same namespace as the Ingress resource.
67
+
the same namespace as the `Ingress` resource.
68
68
69
-
- `cert-manager.io/cluster-issuer`: the name of a cert-manager.ioClusterIssuer
70
-
to acquire the certificate required for this Ingress. It does not matter in
71
-
which namespace your Ingress resides, as `ClusterIssuers` are non-namespaced
69
+
- `cert-manager.io/cluster-issuer`: the name of a `cert-manager.io` `ClusterIssuer`
70
+
to acquire the certificate required for this `Ingress`. It does not matter in
71
+
which namespace your `Ingress` resides, as `ClusterIssuers` are non-namespaced
72
72
resources.
73
73
74
74
> ⚠️ This annotation is a shortcut to refer to to
75
-
cert-manager.ioClusterIssuer without having to specify group and kind. It is
75
+
`cert-manager.io``ClusterIssuer`without having to specify group and kind. It is
76
76
_not_ intended to be used to specify an external cluster-scoped issuer- please
77
77
use `cert-manager.io/issuer` annotation for those.
78
78
@@ -103,7 +103,7 @@ trigger Certificate resources to be automatically created:
103
103
`"cert-manager.io/issue-temporary-certificate": "true"` onto created
104
104
certificates which will cause a [temporary
105
105
certificate](../usage/certificate.md#temporary-certificates-whilst-issuing) to be set
106
-
on the resulting Secret until the final signed certificate has been returned.
106
+
on the resulting `Secret` until the final signed certificate has been returned.
107
107
This is useful for keeping compatibility with the `ingress-gce` component.
108
108
109
109
- `cert-manager.io/common-name`: (optional) this annotation allows you to
@@ -248,11 +248,11 @@ In the above example, cert-manager will create `Certificate` resources that
248
248
reference the `ClusterIssuer` `letsencrypt-prod` for all Ingresses that have a
249
249
`kubernetes.io/tls-acme: "true"` annotation.
250
250
251
-
Issuers configured via specific annotations have a preference over the default issuer. If a default issuer is configured via CLI flags and a `cert-manager.io/cluster-issuer` or `cert-manager.io/issuer` annotation also has been added to an Ingress, the created `Certificate` will refer to the issuer configured via annotation.
251
+
Issuers configured via specific annotations have a preference over the default issuer. If a default issuer is configured via CLI flags and a `cert-manager.io/cluster-issuer` or `cert-manager.io/issuer` annotation also has been added to an `Ingress`, the created `Certificate` will refer to the issuer configured via annotation.
252
252
253
253
When `kubernetes.io/tls-acme: "true"` hasn't been set, automatic certificate deployment may still occur based on the `cert-manager.io/issuer`, `cert-manager.io/issuer-kind`, and `cert-manager.io/issuer-group` annotations.
254
254
255
-
If all annotations are absent, then manual deployment is necessary: create Certificate resources directly, and assign the resulting Secret to the Ingress.
255
+
If all annotations are absent, then manual deployment is necessary: create Certificate resources directly, and assign the resulting `Secret` to the `Ingress`.
256
256
257
257
For more information on deploying cert-manager, read the [installation
0 commit comments