Installer: migrate internal services to *.p.{domain}
diff --git a/charts/certificate-issuer/templates/private.yaml b/charts/certificate-issuer/templates/private.yaml
index 1b5c06d..1ab6e90 100644
--- a/charts/certificate-issuer/templates/private.yaml
+++ b/charts/certificate-issuer/templates/private.yaml
@@ -1,33 +1,20 @@
apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
- name: {{ .Values.private.name }}-bootstrap
- namespace: {{ .Release.Namespace }}
-spec:
- selfSigned: {}
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- name: {{ .Values.private.name }}-ca-root
- namespace: {{ .Release.Namespace }}
-spec:
- isCA: true
- commonName: {{ .Values.private.name }}-ca-root
- secretName: {{ .Values.private.name }}-ca-root
- privateKey:
- algorithm: ECDSA
- size: 256
- issuerRef:
- name: {{ .Values.private.name }}-bootstrap
- kind: ClusterIssuer
- group: cert-manager.io
----
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+kind: Issuer
metadata:
name: {{ .Values.private.name }}
namespace: {{ .Release.Namespace }}
spec:
- ca:
- secretName: {{ .Values.private.name }}-ca-root
+ acme:
+ server: {{ .Values.private.server }}
+ email: {{ .Values.private.contactEmail }}
+ privateKeySecretRef:
+ name: issuer-{{ .Values.private.name }}-account-key
+ solvers:
+ - dns01:
+ webhook:
+ groupName: acme.bwolf.me
+ solverName: gandi
+ config:
+ apiKeySecretRef:
+ key: api-token
+ name: gandi-credentials