More updates to README

This commit is contained in:
Chris Stuurman 2024-03-22 16:11:13 +02:00
parent e4bf2e7138
commit 0373c750d9

View File

@ -31,6 +31,14 @@ But first, Issuers and ClusterIssuers are Kubernetes resources that represent ce
Let's say you need a certificate for `radarr.sthome.net` (should be registered in sthome DNS). Let's say you need a certificate for `radarr.sthome.net` (should be registered in sthome DNS).
First, create a base64 CA bundle:
Obtain CA bundle in .pem format, then execute the following on shell command line:
```bash
cat /path/to/pem/file/ca.pem | sed -e ':a' -e 'N' -e '$!ba' -e 's/\n//g' | base64 -w0
```
Replace `<cabundle>` in .yaml examples below with generated base64 line
Create a cert-manager `Issuer`. Create a `sthome-issuer.yaml` file with the following content: Create a cert-manager `Issuer`. Create a `sthome-issuer.yaml` file with the following content:
```yaml ```yaml
apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
@ -41,9 +49,14 @@ spec:
acme: acme:
email: my-user@sthome.net email: my-user@sthome.net
# acme URL # acme URL
server: https://upd.sthome.lan/acme-v02.api server: https://upd.sthome.net/acme-v02.api
#privateKeySecretRef:
# name: sthome-private-key-secret # Name of a secret used to store the ACME account private key
privateKeySecretRef:
name: sthome-private-key-secret
# Private ca's cert bundle in base64
caBundle: <cabundle>
solvers: solvers:
- dns01: - dns01:
webhook: webhook:
@ -82,8 +95,11 @@ spec:
email: my-user@sthome.net email: my-user@sthome.net
# Name of a secret used to store the ACME account private key # Name of a secret used to store the ACME account private key
#privateKeySecretRef: privateKeySecretRef:
# name: sthome-acme name: sthome-acme
# Private ca's cert bundle in base64
caBundle: <cabundle>
solvers: solvers:
- dns01: - dns01: