Https Cert
Httpscert defines a x.509 certificate.
For example, the default configuration for Kalm dashboard would look as follows:
apiVersion: core.kalm.dev/v1alpha1
kind: HttpsCert
metadata:
name: dashboard
spec:
domains:
- foobar-cluster.kalm.dev
httpsCertIssuer: default-http01-issuer
It defines a certificate for the domain: foobar-cluster.kalm.dev and reference the certificate issuer: default-http01-issuer.
HttpsCert
| Field | Type | Description | Required |
|---|---|---|---|
| isSelfManaged | bool | whether certificate is uploaded by user or managed by Kalm | False |
| selfManagedCertSecretName | string | if IsSelfManaged is true, the name of secret storing the certificate info | False |
| httpsCertIssuer | string | issuer name of the cert | False |
| domains | string[] | domains in certificate | True |
HttpsCertStatus
| Field | Type | Description |
|---|---|---|
| Conditions | HttpsCertCondition[] | details of httpsCert condition |
| ExpireTimestamp | int64 | expire timestamp of the certificate. |
| IsSignedByPublicTrustedCA | bool | is this certificate signed by publicly trusted Certificate Authority. |
| WildcardCertDNSChallengeDomainMap | map[string]string | for wildcard certificate, CNAME info of domains, key is the certificate domain, value if where this certificate domain should add CNAME DNS record to pass the DNS-01 challenge. |
HttpsCertCondition
| Field | Type | Description |
|---|---|---|
| Type | HttpsCertConditionType | type of the HttpsCert condition, possible value: Ready. |
| Status | corev1.ConditionStatus | status of the condition, possible values: True, False and Unknown. |
| Reason | string | a brief machine readable explanation for the condition's last transition. |
| Message | string | a human readable description of the details of the last transition, complementing reason. |