diff --git a/step-issuer.yaml b/step-issuer.yaml new file mode 100644 index 0000000..7564dd3 --- /dev/null +++ b/step-issuer.yaml @@ -0,0 +1,17 @@ +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: step-ca-issuer +spec: + acme: + # L'URL ACME de ton Step-CA (ex: https://step-ca.teyssier.lan/acme/acme/directory) + server: https://step-ca.teyssier.lan/acme/acme/directory + email: admin@teyssier.lan + privateKeySecretRef: + name: step-ca-privkey + solvers: + - http01: + ingress: + class: traefik + # On ajoute la confiance au Root CA de Step + caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tDQpNSUlCdHpDQ0FWNmdBd0lCQWdJUkFOdUJtWHZvelNyLzNVWmhtQlJCZ2Iwd0NnWUlLb1pJemowRUF3SXdPakVYDQpNQlVHQTFVRUNoTU9UVlJGTFVodmJXVk1ZV0l0UTBFeEh6QWRCZ05WQkFNVEZrMVVSUzFJYjIxbFRHRmlMVU5CDQpJRkp2YjNRZ1EwRXdIaGNOTWpZd01qRTVNak15T1RNd1doY05Nell3TWpFM01qTXlPVE13V2pBNk1SY3dGUVlEDQpWUVFLRXc1TlZFVXRTRzl0WlV4aFlpMURRVEVmTUIwR0ExVUVBeE1XVFZSRkxVaHZiV1ZNWVdJdFEwRWdVbTl2DQpkQ0JEUVRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkZpYWgzSElhTGZKNkJqL2JzNG5BMjFLDQp3MG9hTmdqYXhGMFhLdlJnTlg0bldqN2x6V1JNNVJ2cXR1WnVYNGwxS2NmRnE4R1A5TUNkS005cXNpaGUrMXFqDQpSVEJETUE0R0ExVWREd0VCL3dRRUF3SUJCakFTQmdOVkhSTUJBZjhFQ0RBR0FRSC9BZ0VCTUIwR0ExVWREZ1FXDQpCQlRkcHJJYmEyRWRYbHZxN3kwRUljR21CVkM3TGpBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBdzFCdENlL0R2DQo3M1NJaFh2RGVlRHhtTHUwVnRMU3p2RUlSTGhYVzJPZ3NRSWdBMGU0T0N2SGcxbS9kcUpMRUd2a3lMZXp2RlJSDQoxOTZZa2M2MXVnV2g2Y1U9DQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tDQo=