File tree Expand file tree Collapse file tree 4 files changed +34
-1
lines changed
chart/jetstack-secure-gcm/charts
google-cas-issuer/templates Expand file tree Collapse file tree 4 files changed +34
-1
lines changed Original file line number Diff line number Diff line change 1+ ca.crt
2+ ca.key
Original file line number Diff line number Diff line change @@ -229,6 +229,36 @@ You can now click on "View clusters" to monitor your certificates. The
229229documentation about the Jetstack Secure platform is available at
230230< https://platform.jetstack.io/docs > .
231231
232+ Let us try with an example. We can create a CA issuer and sign a
233+ certificate that only lasts for 30 days:
234+
235+ ``` sh
236+ openssl genrsa -out ca.key 2048
237+ openssl req -x509 -new -nodes -key ca.key -subj " /CN=example" -out ca.crt
238+ kubectl create secret tls example --cert=ca.crt --key=ca.key
239+ kubectl apply -f- << EOF
240+ apiVersion: cert-manager.io/v1
241+ kind: Issuer
242+ metadata:
243+ name: selfsigned-issuer
244+ spec:
245+ selfSigned: {}
246+ ---
247+ apiVersion: cert-manager.io/v1alpha2
248+ kind: Certificate
249+ metadata:
250+ name: example
251+ spec:
252+ duration: 721h # very short time to live
253+ dnsNames:
254+ - example.com
255+ issuerRef:
256+ kind: Issuer
257+ name: letsencrypt-prod
258+ secretName: example-tls
259+ EOF
260+ ```
261+
232262### Step 3 (optional): set up the Google Certificate Authority Service
233263
234264[ Google Certificate Authority Service] [ ] is a highly available, scalable Google Cloud
Original file line number Diff line number Diff line change @@ -48,7 +48,7 @@ Selector labels
4848{ {- define " google-cas-issuer.selectorLabels" -} }
4949app.kubernetes.io/name: { { include " google-cas-issuer.name" . } }
5050app.kubernetes.io/instance: { { .Release.Name } }
51- app.kubernetes.io/component: "controller "
51+ app.kubernetes.io/component: "google-cas-issuer "
5252{ {- end } }
5353
5454{ {/*
Original file line number Diff line number Diff line change @@ -48,6 +48,7 @@ Selector labels
4848{ {- define " preflight.selectorLabels" -} }
4949app.kubernetes.io/name: { { include " preflight.name" . } }
5050app.kubernetes.io/instance: { { .Release.Name } }
51+ app.kubernetes.io/component: preflight
5152{ {- end } }
5253
5354{ {/*
You can’t perform that action at this time.
0 commit comments