ian/dumpnet-argo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Setup self-signed issuer for ESO

Browse source
This commit is contained in:
Ian Keane 2026-08-19 09:53:17 -04:00
parent 14130e4454
commit cb9523e2f4
2 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
charts/external-secrets/templates/selfsigned-issuer.yaml Normal file
View file

@ -0,0 +1,7 @@
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: selfsigned
namespace: external-secrets
spec:
selfSigned: {}

7
charts/external-secrets/values.yaml
View file

@ -1,6 +1,7 @@
# External Secrets Operator helm values # External Secrets Operator helm values
# Uses EC2 instance role for AWS auth - no credentials needed # Uses EC2 instance role for AWS auth - no credentials needed
# cert-manager handles webhook TLS instead of the built-in cert-controller # cert-manager handles webhook TLS with a self-signed issuer (internal cluster DNS,
# not publicly routable - Let's Encrypt cannot issue for these names)
installCRDs: true installCRDs: true
certController: certController:
@ -11,5 +12,5 @@ webhook:
enabled: true enabled: true
cert: cert:
issuerRef: issuerRef:
name: letsencrypt-prod name: selfsigned
kind: ClusterIssuer kind: Issuer