2 # Copyright © 2020-2021 Nokia
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
17 {{- if .Values.global.cmpv2Enabled }}
18 {{ include "certManagerCertificate.certificate" . }}
21 {{- if (include "common.onServiceMesh" .) }}
23 apiVersion: cert-manager.io/v1
26 name: ingress-ca-certificate
27 namespace: {{ .Values.tls.issuer.ingressCa.namespace }}
30 commonName: "{{ .Values.global.ingress.virtualhost.baseurl }}" #not important as it is self signed
31 secretName: {{ .Values.tls.issuer.ingressCa.secret.name }}
39 name: {{ .Values.tls.issuer.ingressSelfsigned.name }}
41 group: cert-manager.io
43 apiVersion: cert-manager.io/v1
46 name: ingress-selfsigned-certificate
47 namespace: {{ .Values.tls.issuer.ingressSelfsigned.namespace }}
49 secretName: ingress-tls-secret
51 rotationPolicy: Always
55 duration: 9000h0m0s # 1 Year
56 renewBefore: 4000h0m0s #9 months
57 commonName: "*.{{ .Values.global.ingress.virtualhost.baseurl }}"
62 - {{ .Values.global.ingress.virtualhost.baseurl }}
63 - "*.{{ .Values.global.ingress.virtualhost.baseurl }}"
64 - "*.*.{{ .Values.global.ingress.virtualhost.baseurl }}"
65 - "*.*.*.{{ .Values.global.ingress.virtualhost.baseurl }}"
67 name: {{ .Values.tls.issuer.ingressCa.name }}
69 group: cert-manager.io