Template defaults

2026-08-19 17:34:06 +02:00
parent 6afd9c4c5f
commit 22348ce610
10 changed files with 77 additions and 11 deletions
@@ -0,0 +1,16 @@
+# Not a self-signed cert hand-copied into a Secret like
+# ~/dev/kong/kube/gateway/apigw/secret.yaml does — issuer is per-domain/env
+# config (e.g. sttlab-local-ca ClusterIssuer for local, a real ACME issuer
+# for prod), not hardcoded here.
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: ${NAME}
+  namespace: ${NAMESPACE}
+spec:
+  secretName: ${NAME}-tls
+  dnsNames:
+    - ${HOSTNAME}
+  issuerRef:
+    kind: ${TLS_ISSUER_KIND}
+    name: ${TLS_ISSUER_NAME}