From d004a155d7d07773209b555aef2eab82ee40ac7b Mon Sep 17 00:00:00 2001 From: Vargha Csongor Date: Sat, 13 Apr 2024 23:58:03 +0200 Subject: [PATCH] Add default cert-issuer.yaml --- deployment/cert-issuer.yaml | 45 +++++++++++++++++++ .../{project.yaml => project-argo.yaml} | 0 kustomization.yaml | 3 +- 3 files changed, 47 insertions(+), 1 deletion(-) create mode 100644 deployment/cert-issuer.yaml rename deployment/{project.yaml => project-argo.yaml} (100%) diff --git a/deployment/cert-issuer.yaml b/deployment/cert-issuer.yaml new file mode 100644 index 0000000..23cab2e --- /dev/null +++ b/deployment/cert-issuer.yaml @@ -0,0 +1,45 @@ +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: trust-manager-selfsigned-issuer +spec: + selfSigned: {} +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: cluster-root-certificate + namespace: cert-manager +spec: + isCA: true + commonName: cluster-root-certificate-ca + secretName: cluster-root-certificate-ca-secret + privateKey: + algorithm: ECDSA + size: 256 + issuerRef: + name: trust-manager-selfsigned-issuer + kind: ClusterIssuer + group: cert-manager.io +--- +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: default-cluster-ca-issuer +spec: + ca: + secretName: cluster-root-certificate-ca-secret +--- +apiVersion: trust.cert-manager.io/v1alpha1 +kind: Bundle +metadata: + name: in-cluster-trust-bundle +spec: + sources: + - useDefaultCAs: true + - secret: + name: "cluster-root-certificate-ca-secret" + key: "tls.crt" + target: + configMap: + key: "trust-bundle.pem" \ No newline at end of file diff --git a/deployment/project.yaml b/deployment/project-argo.yaml similarity index 100% rename from deployment/project.yaml rename to deployment/project-argo.yaml diff --git a/kustomization.yaml b/kustomization.yaml index bae1769..98ecf79 100644 --- a/kustomization.yaml +++ b/kustomization.yaml @@ -3,7 +3,8 @@ kind: Kustomization namespace: argocd resources: - - ./deployment/project.yaml + - ./deployment/cert-issuer.yaml + - ./deployment/project-argo.yaml - ./deployment/auth-service-argo.yaml - ./deployment/memgraph-argo.yaml - ./deployment/backend-argo.yaml