22 lines
474 B
YAML
22 lines
474 B
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: nats-ad-ddupan-top
|
|
namespace: nats
|
|
spec:
|
|
secretName: nats-server-tls
|
|
issuerRef:
|
|
name: bao-acme
|
|
kind: ClusterIssuer
|
|
group: cert-manager.io
|
|
commonName: nats.ad.ddupan.top
|
|
dnsNames:
|
|
- nats.ad.ddupan.top
|
|
duration: 720h
|
|
renewBefore: 168h
|
|
privateKey:
|
|
# OpenBao's bao-server role intentionally accepts RSA keys only.
|
|
algorithm: RSA
|
|
size: 2048
|
|
rotationPolicy: Always
|