cert-manager: rename to default-cluster-cert-issuer

much easier, vs ctrl-f for 'default'

cert-manager/default-cluster-cert-issuer.yaml

@@ -2,14 +2,14 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: default
+  name: default-cluster-cert-issuer
   namespace: cert-manager
 spec:
   acme:
     email: info@k-space.ee
     server: https://acme-v02.api.letsencrypt.org/directory
     privateKeySecretRef:
-      name: example-issuer-account-key
+      name: default-cluster-cert-issuer-accountKey # auto-generated by cert-manager
     solvers:
       - dns01:
           rfc2136:

cert-manager/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: cert-manager
+
+# spec: https://kubectl.docs.kubernetes.io/references/kustomize/builtins/#_helmchartinflationgenerator_
+helmCharts:
+- includeCRDs: true
+  name: &name cert-manager
+  releaseName: *name
+  repo: https://charts.jetstack.io
+  version: v1.15.1
+
+resources:
+- ssh://git@git.k-space.ee/secretspace/kube/cert-manager # secrets (.env): tsig-secret
+- ./default-cluster-cert-issuer.yaml

gitea/application.yaml

@@ -8,8 +8,9 @@ spec:
   dnsNames:
     - git.k-space.ee
   issuerRef:
+    group: cert-manager.io
     kind: ClusterIssuer
-    name: default
+    name: default-cluster-cert-issuer
   secretName: git-tls
   revisionHistoryLimit: 1
 ---

minio-clusters/cert.yaml

@@ -8,7 +8,8 @@ spec:
   dnsNames:
     - "*.minio-clusters.k-space.ee"
   issuerRef:
+    group: cert-manager.io
     kind: ClusterIssuer
-    name: default
+    name: default-cluster-cert-issuer
   secretName: wildcard-tls
   revisionHistoryLimit: 1

traefik/application-extras.yml

@@ -19,7 +19,7 @@ spec:
   issuerRef:
     group: cert-manager.io
     kind: ClusterIssuer
-    name: default
+    name: default-cluster-cert-issuer
   secretName: wildcard-tls
   usages:
     - digital signature

wildduck/certificate.yaml

@@ -7,7 +7,8 @@ spec:
   dnsNames:
     - mail.k-space.ee
   issuerRef:
+    group: cert-manager.io
     kind: ClusterIssuer
-    name: default
+    name: default-cluster-cert-issuer
   secretName: wildduck-tls
   revisionHistoryLimit: 1