gcloud-lab/trading-platform/deploy/k8s/base/cert-manager/api-gateway-mtls-cert.yaml

25 lines
591 B
YAML
Raw Normal View History

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: api-gateway-mtls-cert
namespace: customer1
spec:
secretName: api-gateway-mtls-secret
duration: 2160h # 90 days
renewBefore: 360h # 15 days
commonName: api-gateway.customer1.svc.cluster.local
dnsNames:
- api-gateway
- api-gateway.customer1
- api-gateway.customer1.svc
- api-gateway.customer1.svc.cluster.local
usages:
- digital signature
- key encipherment
- client auth
- server auth
issuerRef:
name: trading-platform-ca-issuer
kind: Issuer
group: cert-manager.io