File tree Expand file tree Collapse file tree 4 files changed +34
-1
lines changed
chart/jetstack-secure-gcm/charts
google-cas-issuer/templates Expand file tree Collapse file tree 4 files changed +34
-1
lines changed Original file line number Diff line number Diff line change
1
+ ca.crt
2
+ ca.key
Original file line number Diff line number Diff line change @@ -229,6 +229,36 @@ You can now click on "View clusters" to monitor your certificates. The
229
229
documentation about the Jetstack Secure platform is available at
230
230
< https://platform.jetstack.io/docs > .
231
231
232
+ Let us try with an example. We can create a CA issuer and sign a
233
+ certificate that only lasts for 30 days:
234
+
235
+ ``` sh
236
+ openssl genrsa -out ca.key 2048
237
+ openssl req -x509 -new -nodes -key ca.key -subj " /CN=example" -out ca.crt
238
+ kubectl create secret tls example --cert=ca.crt --key=ca.key
239
+ kubectl apply -f- << EOF
240
+ apiVersion: cert-manager.io/v1
241
+ kind: Issuer
242
+ metadata:
243
+ name: selfsigned-issuer
244
+ spec:
245
+ selfSigned: {}
246
+ ---
247
+ apiVersion: cert-manager.io/v1alpha2
248
+ kind: Certificate
249
+ metadata:
250
+ name: example
251
+ spec:
252
+ duration: 721h # very short time to live
253
+ dnsNames:
254
+ - example.com
255
+ issuerRef:
256
+ kind: Issuer
257
+ name: letsencrypt-prod
258
+ secretName: example-tls
259
+ EOF
260
+ ```
261
+
232
262
### Step 3 (optional): set up the Google Certificate Authority Service
233
263
234
264
[ Google Certificate Authority Service] [ ] is a highly available, scalable Google Cloud
Original file line number Diff line number Diff line change @@ -48,7 +48,7 @@ Selector labels
48
48
{ {- define " google-cas-issuer.selectorLabels" -} }
49
49
app.kubernetes.io/name: { { include " google-cas-issuer.name" . } }
50
50
app.kubernetes.io/instance: { { .Release.Name } }
51
- app.kubernetes.io/component: "controller "
51
+ app.kubernetes.io/component: "google-cas-issuer "
52
52
{ {- end } }
53
53
54
54
{ {/*
Original file line number Diff line number Diff line change @@ -48,6 +48,7 @@ Selector labels
48
48
{ {- define " preflight.selectorLabels" -} }
49
49
app.kubernetes.io/name: { { include " preflight.name" . } }
50
50
app.kubernetes.io/instance: { { .Release.Name } }
51
+ app.kubernetes.io/component: preflight
51
52
{ {- end } }
52
53
53
54
{ {/*
You can’t perform that action at this time.
0 commit comments