ansible-role-k8s/templates/shared/clusterissuer-acme.yaml.j2

25 lines
651 B
Django/Jinja

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: {{ item.name }}
spec:
acme:
server: {{ item.server | d('https://acme-v02.api.letsencrypt.org/directory') }}
email: {{ item.email | d(k8s_acme_email) }}
privateKeySecretRef:
name: {{ item.name }}-prviate-key
solvers:
{% for solver in item.solvers %}
{% if solver.type == "http" %}
- http01:
ingress:
class: {{ solver.ingress }}
{% elif solver.type == "dns" %}
- dns01:
{{ solver.provider }}:
{{ solver.tokenref }}:
name: {{ solver.secret_name }}
key: {{ solver.secret_key }}
{% endif -%}
{% endfor -%}