infra/talos/cert-manager/letsencrypt-clusterissuer.yaml

35 lines
999 B
YAML

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
# Production Let's Encrypt server
server: https://acme-v02.api.letsencrypt.org/directory
email: graham@mcintire.me
privateKeySecretRef:
name: letsencrypt-prod
solvers:
# HTTP-01 solver with standalone pod
# cert-manager will create temporary pods to respond to challenges
- http01:
ingress:
ingressClassName: traefik
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
# Staging Let's Encrypt server (for testing, has higher rate limits)
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: graham@mcintire.me
privateKeySecretRef:
name: letsencrypt-staging
solvers:
# HTTP-01 solver with standalone pod
# cert-manager will create temporary pods to respond to challenges
- http01:
ingress:
ingressClassName: traefik