Mayne0213
82781cb4f1
- Move ClusterIssuer to manifests/ folder - Separate from Helm chart configuration
42 lines
1.2 KiB
YAML
42 lines
1.2 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-prod
|
|
spec:
|
|
acme:
|
|
# Let's Encrypt Production 서버
|
|
# 실제 운영 환경에서 사용
|
|
# Rate limit: 50 certificates per registered domain per week
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
|
|
# 인증서 만료 알림을 받을 이메일 주소
|
|
email: bluemayne0213@icloud.com
|
|
|
|
# ACME 계정의 private key를 저장할 Secret 이름
|
|
privateKeySecretRef:
|
|
name: letsencrypt-prod
|
|
|
|
# HTTP-01 challenge를 사용하여 도메인 소유권 검증
|
|
# Traefik Ingress를 통해 /.well-known/acme-challenge/ 경로로 검증
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
class: traefik
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-staging
|
|
spec:
|
|
acme:
|
|
# Let's Encrypt Staging 서버
|
|
# 테스트용 - 브라우저에서 신뢰하지 않지만 rate limit 없음
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
email: bluemayne0213@icloud.com
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
class: traefik
|