filer-cert.yaml 1.2 KB

123456789101112131415161718192021222324252627282930313233
  1. {{- if .Values.global.enableSecurity }}
  2. apiVersion: certmanager.k8s.io/v1alpha1
  3. kind: Certificate
  4. metadata:
  5. name: {{ template "seaweedfs.name" . }}-filer-cert
  6. namespace: {{ .Release.Namespace }}
  7. spec:
  8. secretName: {{ template "seaweedfs.name" . }}-filer-cert
  9. issuerRef:
  10. name: {{ template "seaweedfs.name" . }}-clusterissuer
  11. kind: ClusterIssuer
  12. commonName: {{ .Values.certificates.commonName }}
  13. organization:
  14. - "SeaweedFS CA"
  15. dnsNames:
  16. - '*.{{ .Release.Namespace }}'
  17. - '*.{{ .Release.Namespace }}.svc'
  18. - '*.{{ .Release.Namespace }}.svc.cluster.local'
  19. - '*.{{ template "seaweedfs.name" . }}-master'
  20. - '*.{{ template "seaweedfs.name" . }}-master.{{ .Release.Namespace }}'
  21. - '*.{{ template "seaweedfs.name" . }}-master.{{ .Release.Namespace }}.svc'
  22. - '*.{{ template "seaweedfs.name" . }}-master.{{ .Release.Namespace }}.svc.cluster.local'
  23. {{- if .Values.certificates.ipAddresses }}
  24. ipAddresses:
  25. {{- range .Values.certificates.ipAddresses }}
  26. - {{ . }}
  27. {{- end }}
  28. {{- end }}
  29. keyAlgorithm: {{ .Values.certificates.keyAlgorithm }}
  30. keySize: {{ .Values.certificates.keySize }}
  31. duration: {{ .Values.certificates.duration }}
  32. renewBefore: {{ .Values.certificates.renewBefore }}
  33. {{- end }}