| --- |
| apiVersion: certmanager.k8s.io/v1alpha1 |
| kind: ClusterIssuer |
| metadata: |
| name: letsencrypt-staging |
| namespace: dubbo-system |
| spec: |
| acme: |
| # The ACME server URL |
| server: https://acme-staging-v02.api.letsencrypt.org/directory |
| # Email address used for ACME registration |
| email: stage@istio.io |
| # Name of a secret used to store the ACME account private key |
| privateKeySecretRef: |
| name: letsencrypt-staging |
| # Enable the HTTP-01 challenge provider |
| http01: {} |
| --- |
| apiVersion: certmanager.k8s.io/v1alpha1 |
| kind: Certificate |
| metadata: |
| name: istio-ingressgateway-certs |
| namespace: dubbo-system |
| spec: |
| secretName: istio-ingressgateway-certs |
| issuerRef: |
| name: letsencrypt-staging |
| kind: ClusterIssuer |
| commonName: bookinfo.example.com |
| dnsNames: |
| - bookinfo.example.com |
| acme: |
| config: |
| - http01: |
| ingressClass: none |
| domains: |
| - bookinfo.example.com |