gcloud-lab/trading-platform/deploy/k8s/base/cert-manager/data-service-mtls-cert.yaml

25 lines
598 B
YAML
Raw Normal View History

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: data-service-mtls-cert
namespace: customer1
spec:
secretName: data-service-mtls-secret
duration: 2160h # 90 days
renewBefore: 360h # 15 days
commonName: data-service.customer1.svc.cluster.local
dnsNames:
- data-service
- data-service.customer1
- data-service.customer1.svc
- data-service.customer1.svc.cluster.local
usages:
- digital signature
- key encipherment
- client auth
- server auth
issuerRef:
name: trading-platform-ca-issuer
kind: Issuer
group: cert-manager.io