future-megabyte-14556
02/03/2020, 8:42 AMlimited-rainbow-51650
02/03/2020, 8:48 AMapiVersion: <http://certmanager.k8s.io/v1alpha1|certmanager.k8s.io/v1alpha1>
kind: ClusterIssuer
metadata:
name: letsencrypt-prod-ci
spec:
acme:
# The ACME server URL
server: <https://acme-v02.api.letsencrypt.org/directory>
# Email address used for ACME registration
email: <your email address here>
# Name of a secret used to store the ACME account private key
privateKeySecretRef:
name: letsencrypt-prod-secret
solvers:
# An empty 'selector' means that this solver matches all domains
- selector: {}
http01:
ingress:
class: addon-http-application-routing
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: my-ingress
annotations:
<http://certmanager.k8s.io/cluster-issuer|certmanager.k8s.io/cluster-issuer>: letsencrypt-prod-ci
<http://kubernetes.io/ingress.class|kubernetes.io/ingress.class>: addon-http-application-routing
spec:
tls:
- hosts:
- demo.my.host.name
secretName: my-tls
rules:
- host: demo.my.host.name
http:
paths:
- path: /
backend:
serviceName: backend
servicePort: 80
future-megabyte-14556
02/03/2020, 8:51 AMlimited-rainbow-51650
02/03/2020, 8:52 AMfuture-megabyte-14556
02/03/2020, 8:52 AMClusterIssuer
class that extends pulumi.CustomResource