apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: step-ca-issuer
spec:
  acme:
    # L'URL ACME de ton Step-CA (ex: https://step-ca.teyssier.lan/acme/acme/directory)
    server: https://step-ca.teyssier.lan/acme/acme/directory
    email: admin@teyssier.lan
    privateKeySecretRef:
      name: step-ca-privkey
    solvers:
    - http01:
        ingress:
          class: traefik
    # On ajoute la confiance au Root CA de Step
    caBundle: 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