Setup self-signed issuer for ESO

This commit is contained in:
Ian Keane 2026-08-19 09:53:17 -04:00
parent 14130e4454
commit cb9523e2f4
2 changed files with 11 additions and 3 deletions

View file

@ -1,6 +1,7 @@
# External Secrets Operator helm values
# Uses EC2 instance role for AWS auth - no credentials needed
# cert-manager handles webhook TLS instead of the built-in cert-controller
# cert-manager handles webhook TLS with a self-signed issuer (internal cluster DNS,
# not publicly routable - Let's Encrypt cannot issue for these names)
installCRDs: true
certController:
@ -11,5 +12,5 @@ webhook:
enabled: true
cert:
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
name: selfsigned
kind: Issuer