Skip to content

Commit 6f61637

Browse files
committed
Readme: add an example of when a certificate is shown in the JSP UI
Signed-off-by: Maël Valais <[email protected]>
1 parent 63f7ff4 commit 6f61637

File tree

1 file changed

+13
-8
lines changed

1 file changed

+13
-8
lines changed

README.md

Lines changed: 13 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -233,32 +233,37 @@ Let us try with an example. We can create a CA issuer and sign a
233233
certificate that only lasts for 30 days:
234234

235235
```sh
236-
openssl genrsa -out ca.key 2048
237-
openssl req -x509 -new -nodes -key ca.key -subj "/CN=example" -out ca.crt
238-
kubectl create secret tls example --cert=ca.crt --key=ca.key
236+
docker run -it --rm -v "$(pwd)":/tmp frapsoft/openssl genrsa -out /tmp/ca.key 2048
237+
docker run -it --rm -v "$(pwd)":/tmp frapsoft/openssl req -x509 -new -nodes -key /tmp/ca.key -subj "/CN=example" -reqexts v3_req -extensions v3_ca -out /tmp/ca.crt
238+
kubectl create secret tls example-ca-key-pair --cert=ca.crt --key=ca.key
239239
kubectl apply -f- <<EOF
240240
apiVersion: cert-manager.io/v1
241241
kind: Issuer
242242
metadata:
243-
name: selfsigned-issuer
243+
name: example-ca-issuer
244244
spec:
245-
selfSigned: {}
245+
ca:
246+
secretName: example-ca-key-pair
246247
---
247248
apiVersion: cert-manager.io/v1alpha2
248249
kind: Certificate
249250
metadata:
250-
name: example
251+
name: example-cert
251252
spec:
252253
duration: 721h # very short time to live
253254
dnsNames:
254255
- example.com
255256
issuerRef:
256257
kind: Issuer
257-
name: letsencrypt-prod
258+
name: example-ca-issuer
258259
secretName: example-tls
259-
EOF
260260
```
261261
262+
A few seconds later, you will see the certificate `example-cert` appear in
263+
the Jetstack Secure Platform UI:
264+
265+
<img src="https://user-images.githubusercontent.com/2195781/110807883-bf7e8a80-8283-11eb-9d0d-57be5c063d3d.png" width="500" alt="The certificate example-cert shows in the UI at platform.jetstack.io. This screenshot is stored in this issue: https://github.com/jetstack/jetstack-secure-gcm/issues/21">
266+
262267
### Step 3 (optional): set up the Google Certificate Authority Service
263268
264269
[Google Certificate Authority Service][] is a highly available, scalable Google Cloud

0 commit comments

Comments
 (0)