Skip to content
This repository has been archived by the owner on May 3, 2024. It is now read-only.

Commit

Permalink
Update documentation about Issuer, prod and staging
Browse files Browse the repository at this point in the history
Add details about showing the key details
  • Loading branch information
bwolf committed Feb 28, 2020
1 parent ba9afbd commit e1e7f46
Showing 1 changed file with 31 additions and 23 deletions.
54 changes: 31 additions & 23 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -102,29 +102,29 @@ This webhook has been tested with [cert-manager] v0.13.1 and Kubernetes v0.17.x
6. Create a staging issuer (email addresses with the suffix `example.com` are forbidden):

cat << EOF | sed "s/[email protected]/$email/" | kubectl apply -f -
apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
name: letsencrypt-staging
namespace: default
spec:
acme:
# The ACME server URL
server: https://acme-staging-v02.api.letsencrypt.org/directory
# Email address used for ACME registration
email: [email protected]
# Name of a secret used to store the ACME account private key
privateKeySecretRef:
name: letsencrypt-staging
solvers:
- dns01:
webhook:
groupName: acme.bwolf.me
solverName: gandi
config:
apiKeySecretRef:
key: api-token
name: gandi-credentials
apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
name: letsencrypt-staging
namespace: default
spec:
acme:
# The ACME server URL
server: https://acme-staging-v02.api.letsencrypt.org/directory
# Email address used for ACME registration
email: [email protected]
# Name of a secret used to store the ACME account private key
privateKeySecretRef:
name: letsencrypt-staging
solvers:
- dns01:
webhook:
groupName: acme.bwolf.me
solverName: gandi
config:
apiKeySecretRef:
key: api-token
name: gandi-credentials
EOF

Check status of the Issuer:
Expand Down Expand Up @@ -152,6 +152,10 @@ This webhook has been tested with [cert-manager] v0.13.1 and Kubernetes v0.17.x

kubectl describe certificate $DOMAIN

Display the details like the common name and subject alternative names:

kubectl get secret $DOMAIN-tls -o yaml

8. Issue a wildcard Certificate for your `$DOMAIN`:

cat << EOF | sed "s/example-com/$DOMAIN/" | kubectl apply -f -
Expand All @@ -171,6 +175,10 @@ This webhook has been tested with [cert-manager] v0.13.1 and Kubernetes v0.17.x

kubectl describe certificate $DOMAIN

Display the details like the common name and subject alternative names:

kubectl get secret wildcard-$DOMAIN-tls -o yaml

99. Uninstall this webhook:

helm uninstall cert-manager-webhook-gandi --namespace cert-manager
Expand Down

0 comments on commit e1e7f46

Please sign in to comment.