-
Notifications
You must be signed in to change notification settings - Fork 159
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #326 from rmgrimm/enhance-cert-manager
Enhance openshift-cert-manager-operator
- Loading branch information
Showing
24 changed files
with
139 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
3 changes: 3 additions & 0 deletions
3
...hift-cert-manager-operator/examples/letsencrypt-http01-cluster-issuer/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| This is an example of ClusterIssuer resources for letsencrypt to use HTTP01 solver. Use of these prod and staging | ||
| cluster issuers requires valid DNS that will point letsencrypt servers to an ingress with which cert-manager can respond | ||
| from within OpenShift. |
6 changes: 6 additions & 0 deletions
6
...shift-cert-manager-operator/examples/letsencrypt-http01-cluster-issuer/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - letsencrypt-prod-cluster-issuer.yaml | ||
| - letsencrypt-staging-cluster-issuer.yaml |
15 changes: 15 additions & 0 deletions
15
...-operator/examples/letsencrypt-http01-cluster-issuer/letsencrypt-prod-cluster-issuer.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: ClusterIssuer | ||
| metadata: | ||
| name: letsencrypt-prod | ||
| spec: | ||
| acme: | ||
| # This key doesn't exist, cert-manager creates it | ||
| privateKeySecretRef: | ||
| name: letsencrypt-prod-account-key | ||
| server: 'https://acme-v02.api.letsencrypt.org/directory' | ||
| preferredChain: '' | ||
| solvers: | ||
| - http01: | ||
| ingress: | ||
| class: openshift-default |
15 changes: 15 additions & 0 deletions
15
...erator/examples/letsencrypt-http01-cluster-issuer/letsencrypt-staging-cluster-issuer.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: ClusterIssuer | ||
| metadata: | ||
| name: letsencrypt-staging | ||
| spec: | ||
| acme: | ||
| # This key doesn't exist, cert-manager creates it | ||
| privateKeySecretRef: | ||
| name: letsencrypt-staging-account-key | ||
| server: 'https://acme-staging-v02.api.letsencrypt.org/directory' | ||
| preferredChain: '' | ||
| solvers: | ||
| - http01: | ||
| ingress: | ||
| class: openshift-default |
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
4 changes: 4 additions & 0 deletions
4
openshift-cert-manager-operator/examples/self-signed-ca-cluster-issuer/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| This is an example of using cert-manager to generate a root CA for signing certificates. | ||
|
|
||
| It works by creating a namespaced issuer (not ClusterIssuer) to generate the root certificate in the cert-manager | ||
| namespace. It then references the root certificate with a ClusterIssuer set to be a CA. |
7 changes: 7 additions & 0 deletions
7
openshift-cert-manager-operator/examples/self-signed-ca-cluster-issuer/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - self-signed-root-issuer.yaml | ||
| - self-signed-ca-root.yaml | ||
| - self-signed-ca-cluster-issuer.yaml |
7 changes: 7 additions & 0 deletions
7
...anager-operator/examples/self-signed-ca-cluster-issuer/self-signed-ca-cluster-issuer.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: ClusterIssuer | ||
| metadata: | ||
| name: self-signed-ca | ||
| spec: | ||
| ca: | ||
| secretName: self-signed-ca-root |
16 changes: 16 additions & 0 deletions
16
...ift-cert-manager-operator/examples/self-signed-ca-cluster-issuer/self-signed-ca-root.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Certificate | ||
| metadata: | ||
| name: self-signed-ca-root | ||
| namespace: cert-manager | ||
| spec: | ||
| issuerRef: | ||
| group: cert-manager.io | ||
| kind: Issuer | ||
| name: self-signed-root | ||
| isCA: true | ||
| commonName: self-signed-ca-root | ||
| secretName: self-signed-ca-root | ||
| privateKey: | ||
| algorithm: ECDSA | ||
| size: 256 |
7 changes: 7 additions & 0 deletions
7
...cert-manager-operator/examples/self-signed-ca-cluster-issuer/self-signed-root-issuer.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Issuer | ||
| metadata: | ||
| name: self-signed-root | ||
| namespace: cert-manager | ||
| spec: | ||
| selfSigned: {} |
1 change: 1 addition & 0 deletions
1
openshift-cert-manager-operator/examples/self-signed-issuer/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| This is an example of a cert-manager namespaced issuer (not ClusterIssuer) for generating self-signed certificates. |
5 changes: 5 additions & 0 deletions
5
openshift-cert-manager-operator/examples/self-signed-issuer/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - self-signed-issuer.yaml |
6 changes: 6 additions & 0 deletions
6
openshift-cert-manager-operator/examples/self-signed-issuer/self-signed-issuer.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: Issuer | ||
| metadata: | ||
| name: self-signed-issuer | ||
| spec: | ||
| selfSigned: {} |
11 changes: 11 additions & 0 deletions
11
openshift-cert-manager-operator/operator/overlays/stable-v1.12/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - ../../base | ||
|
|
||
| patches: | ||
| - target: | ||
| kind: Subscription | ||
| name: openshift-cert-manager-operator | ||
| path: patch-channel.yaml |
3 changes: 3 additions & 0 deletions
3
openshift-cert-manager-operator/operator/overlays/stable-v1.12/patch-channel.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| - op: replace | ||
| path: /spec/channel | ||
| value: stable-v1.12 |
11 changes: 11 additions & 0 deletions
11
openshift-cert-manager-operator/operator/overlays/stable-v1.13/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - ../../base | ||
|
|
||
| patches: | ||
| - target: | ||
| kind: Subscription | ||
| name: openshift-cert-manager-operator | ||
| path: patch-channel.yaml |
3 changes: 3 additions & 0 deletions
3
openshift-cert-manager-operator/operator/overlays/stable-v1.13/patch-channel.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| - op: replace | ||
| path: /spec/channel | ||
| value: stable-v1.13 |
11 changes: 11 additions & 0 deletions
11
openshift-cert-manager-operator/operator/overlays/stable-v1.14/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| apiVersion: kustomize.config.k8s.io/v1beta1 | ||
| kind: Kustomization | ||
|
|
||
| resources: | ||
| - ../../base | ||
|
|
||
| patches: | ||
| - target: | ||
| kind: Subscription | ||
| name: openshift-cert-manager-operator | ||
| path: patch-channel.yaml |
3 changes: 3 additions & 0 deletions
3
openshift-cert-manager-operator/operator/overlays/stable-v1.14/patch-channel.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| - op: replace | ||
| path: /spec/channel | ||
| value: stable-v1.14 |