From 332d5c60296f7ee0cb51e9fc4e06647e24428fda5a8f7e6578f94b8d8b8515ad Mon Sep 17 00:00:00 2001
From: Maxime TEYSSIER <me@riesjack.fr>
Date: Thu, 26 Feb 2026 15:40:21 +0100
Subject: [PATCH] Add step-ca config file to join homelab Step-CA server

---
 step-issuer.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 step-issuer.yaml

diff --git a/step-issuer.yaml b/step-issuer.yaml
new file mode 100644
index 0000000..7564dd3
--- /dev/null
+++ b/step-issuer.yaml
@@ -0,0 +1,17 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: step-ca-issuer
+spec:
+  acme:
+    # L'URL ACME de ton Step-CA (ex: https://step-ca.teyssier.lan/acme/acme/directory)
+    server: https://step-ca.teyssier.lan/acme/acme/directory
+    email: admin@teyssier.lan
+    privateKeySecretRef:
+      name: step-ca-privkey
+    solvers:
+    - http01:
+        ingress:
+          class: traefik
+    # On ajoute la confiance au Root CA de Step
+    caBundle: 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