ab0d3f097c
- This patchset installs ClusterIssuer that references the selfsigned certificates generated via Issuer in config/samples - Passing in the generated secret from Issuer in SIP CR so that it can be consumed by ClusterIssuer - Changes made in overall structure of config/samples since Issuer and Secret required for dex needs to be in cert-manager namespace - Changes made in install-k8s.sh since minikube installation needs that apiserver-names param for dex endpoint to work - Changes made in deploy-sip.sh for installation of Cert-Manager since we need to enable it temporarily for gates - Added TODO for Auth related Test cases, for more details https://github.com/airshipit/sip/issues/14 Note: This patchset doesn't install Dex but the pre-req for Dex Change-Id: If1962ead2a38dd0082a5e8978e5869f5c06aa757
19 lines
351 B
YAML
19 lines
351 B
YAML
apiVersion: cert-manager.io/v1alpha3
|
|
kind: Issuer
|
|
metadata:
|
|
name: selfsigned-cert-issuer
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
apiVersion: cert-manager.io/v1alpha3
|
|
kind: Certificate
|
|
metadata:
|
|
name: selfsigned-cert
|
|
spec:
|
|
dnsNames:
|
|
- dex.site.local
|
|
secretName: dex-ca-key-pair
|
|
isCA: true
|
|
issuerRef:
|
|
name: selfsigned-cert-issuer
|
|
kind: Issuer |