32 lines
2.0 KiB
YAML
32 lines
2.0 KiB
YAML
# Step issuer for FlowerCore.DeviceManagement runtime mTLS leaves.
|
|
#
|
|
# Requires the smallstep step-issuer CRDs/controller:
|
|
# stepclusterissuers.certmanager.step.sm
|
|
# The provisioner password lives in the live cert-manager Secret below; do not
|
|
# commit the password or generated private key material to this repo.
|
|
apiVersion: certmanager.step.sm/v1beta1
|
|
kind: StepClusterIssuer
|
|
metadata:
|
|
name: step-ca-agent
|
|
labels:
|
|
app.kubernetes.io/name: step-ca-agent
|
|
app.kubernetes.io/component: pki
|
|
app.kubernetes.io/part-of: flowercore
|
|
app.kubernetes.io/managed-by: argocd
|
|
flowercore.io/tenant-id: system
|
|
flowercore.io/created-by: bluejay-infra
|
|
annotations:
|
|
flowercore.io/traceability-standard: k8s-pod-ownership-and-traceability-standard
|
|
flowercore.io/provisioner-source: profile::pki::stepca
|
|
flowercore.io/secret-source: cert-manager/step-ca-agent-provisioner-password
|
|
spec:
|
|
url: https://10.0.56.10:9443
|
|
caBundle: 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
|
|
provisioner:
|
|
name: step-ca-agent
|
|
kid: RF3A9welUYVOWBX8tr19aWyA2kQlxoGZN1dRwTElUEM
|
|
passwordRef:
|
|
name: step-ca-agent-provisioner-password
|
|
namespace: cert-manager
|
|
key: password
|