diff --git a/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml b/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml deleted file mode 100644 index fb7dfac1..00000000 --- a/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml +++ /dev/null @@ -1,39 +0,0 @@ ---- -# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/cert-manager.io/certificate_v1.json -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: &name home-selfsigned-ca -spec: - isCA: true - commonName: *name - subject: - organizations: - - ${SECRET_INTERNAL_DOMAIN} - secretName: root-secret - privateKey: - algorithm: ECDSA - size: 256 - issuerRef: - name: selfsigned-issuer - kind: ClusterIssuer - group: cert-manager.io ---- -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: &name strong-selfsigned-ca -spec: - isCA: true - commonName: *name - subject: - organizations: - - ${SECRET_INTERNAL_DOMAIN} - secretName: strong-root-secret - privateKey: - algorithm: ECDSA - size: 384 - issuerRef: - name: selfsigned-issuer - kind: ClusterIssuer - group: cert-manager.io diff --git a/kubernetes/apps/cert-manager/cert-manager/selfsigned/clusterissuer.yaml b/kubernetes/apps/cert-manager/cert-manager/selfsigned/clusterissuer.yaml index d801a661..96409899 100644 --- a/kubernetes/apps/cert-manager/cert-manager/selfsigned/clusterissuer.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/selfsigned/clusterissuer.yaml @@ -1,5 +1,28 @@ --- -# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/cert-manager.io/clusterissuer_v1.json +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: selfsigned-issuer +spec: + selfSigned: {} +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: home-selfsigned-ca + namespace: cert-manager +spec: + isCA: true + commonName: home-selfsigned-ca + secretName: root-secret + privateKey: + algorithm: ECDSA + size: 256 + issuerRef: + name: selfsigned-issuer + kind: ClusterIssuer + group: cert-manager.io +--- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: @@ -7,11 +30,3 @@ metadata: spec: ca: secretName: root-secret ---- -apiVersion: cert-manager.io/v1 -kind: ClusterIssuer -metadata: - name: strong-ca-issuer -spec: - ca: - secretName: strong-root-secret diff --git a/kubernetes/apps/cert-manager/cert-manager/selfsigned/kustomization.yaml b/kubernetes/apps/cert-manager/cert-manager/selfsigned/kustomization.yaml index c856d5d3..456611d1 100644 --- a/kubernetes/apps/cert-manager/cert-manager/selfsigned/kustomization.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/selfsigned/kustomization.yaml @@ -3,5 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ./certificate.yaml - ./clusterissuer.yaml