Comments (4)
Example production Issuer
for Google Cloud DNS:
apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
name: letsencrypt-prod
namespace: openfaas
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: <email@domain>
privateKeySecretRef:
name: letsencrypt-prod
dns01:
providers:
- name: prod-dns
clouddns:
serviceAccountSecretRef:
name: clouddns-service-account
key: <service-account.json>
project: <project-id-goes-here>
We should create Staging and Production, but have it use Staging in the certificate (a template flag defaulting to staging)
from ofc-bootstrap.
Issuer for OpenFaaS Cloud mini:
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
name: mini.o6s.io
namespace: openfaas
spec:
secretName: o6s-mini-com-tls
issuerRef:
name: letsencrypt-prod
kind: Issuer
commonName: '*.mini.o6s.io'
dnsNames:
- '*.mini.o6s.io'
acme:
config:
- dns01:
ingressClass: nginx
provider: prod-dns
domains:
- '*.mini.o6s.io'
from ofc-bootstrap.
For the separate auth domain cert:
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
name: auth.system.mini.o6s.io
namespace: openfaas
spec:
secretName: auth-system-mini-o6s-com-tls
issuerRef:
name: letsencrypt-prod
kind: Issuer
commonName: 'auth.system.mini.o6s.io'
dnsNames:
- 'auth.system.mini.o6s.io'
acme:
config:
- dns01:
ingressClass: nginx
provider: prod-dns
domains:
- auth.system.mini.o6s.io
from ofc-bootstrap.
Derek assign: me
from ofc-bootstrap.
Related Issues (20)
- Support secure_cookie configuration added in OFC HOT 3
- Move Github App creation templates into ./templates
- Question: Multiple Private Registry HOT 6
- Proposal: modify the filename in the user guide "Switch from staging to production TLS"
- I can not get the public cert to seal my secrets HOT 7
- Add cookie_domain to dashboard_config.yml HOT 1
- create-github-app failing HOT 9
- generated-tls-issuer-*.yml uses apiKeySecretRef instead of apiTokenSecretRef with cloudflare dns
- Refactor apply.go to split code into smaller related chunks
- Support request HOT 7
- Question about GitLab.com support HOT 2
- Update OFC Authorization code to avoid depreciation of GitHub API calls HOT 6
- Migrate to installing OCF components with the new OFC Helm chart HOT 1
- Migrate from Travis to GH Actions HOT 1
- Feature request: use an existing Ingress controller HOT 2
- Feature request: make cert-manager optional HOT 3
- Set DirectFunctions to false
- Blog post about setting up for localdev can not be completed HOT 9
- [support] after running ofc-bootstrap with GitHub config, unable to see functions. HOT 6
- Debian 10 Buster: "ofc-bootstrap apply" failure on k8s.GetNodeArchitecture() HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ofc-bootstrap.