Files
yucca-o11y/kubernetes/apps/base/cert-manager-issuers/app/clusterissuer.yaml
T

21 lines
617 B
YAML

---
# Cloudflare DNS-01 issuer for *.o11y.futo.network (native support, no webhook; the OVH
# letsencrypt-production issuer handles futostatus.com). Token via externalsecret.yaml.
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-cloudflare
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: acme@futo.org
profile: shortlived
privateKeySecretRef:
name: letsencrypt-cloudflare-account-key
solvers:
- dns01:
cloudflare:
apiTokenSecretRef:
name: cloudflare-api-token
key: api-token