KalmHttps Cert Issuer
HttpsCertIssuer contains configurations for HTTPs certificate issuer.
The default HTTP01 issuer would look as follows:
apiVersion: core.kalm.dev/v1alpha1
kind: HttpsCertIssuer
metadata:
name: default-http01-issuer
spec:
http01: {}
The default DNS01 issuer would look as follows:
apiVersion: core.kalm.dev/v1alpha1
kind: HttpsCertIssuer
metadata:
name: default-dns01-issuer
spec:
dns01:
baseACMEDomain: acme.foobar-cluster.clusters.kalm-dns.com
configs:
foobar-cluster.clusters.kalm-apps.com:
fulldomain: 4dcf92.acme.foobar-cluster.clusters.kalm-dns.com
password: m8-PS6CzMlP_VW_Mp7qWr7fwqeXly09
subdomain: 4dcfea60-4074-9d44-dbdc5bfe5192
username: bb453100-422e-8839-0013c700bc12
HttpsCertIssuer
| Field | Type | Description | Required |
|---|---|---|---|
| http01 | *HTTP01Issuer | Certificate Issuer using HTTP01 challenge validations | False |
| dns01 | *DNS01Issuer | Certificate Issuer using DNS01 challenge validations | False |
HTTP01Issuer
| Field | Type | Description | Required |
|---|---|---|---|
| string | email for admin | False |
DNS01Issuer
| Field | Type | Description | Required |
|---|---|---|---|
| BaseACMEDomain | string | base domain for our ACME-DNS server | True |
| Configs | map(string, DNS01IssuerConfig) | configs to setup different wildcard certificate domains in our ACME-DNS server, key is domain, value is config. | False |
DNS01IssuerConfig
config used by cert-manager to configure our ACME-DNS server to pass DNS01 challenges.
| Field | Type | Description | Required |
|---|---|---|---|
| UserName | string | True | |
| Password | string | True | |
| FullDomain | string | True | |
| SubDomain | string | True | |
| AllowFrom | []string | False |