k8s_flux_infra/components/security/configs/base/cert-manager-issuers.yaml

61 lines
3.6 KiB
YAML
Raw Normal View History

2025-11-29 13:01:49 +00:00
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
email: ENC[AES256_GCM,data:n3PMXRaaOw3mHTE+,iv:AdKUp2cgIs6/4wM2n2WXI9xZ1dPzzrPQhtRgsOaI2Ug=,tag:x74U/+A85Z5v3N7zCEAdMw==,type:str]
server: ENC[AES256_GCM,data:LHJVbmwjg8iwAKE2yR46R/hivMKCvQGI8HHTnROjPMtUdpiMyoGXslJeck89/qVdW6hgTBGb,iv:8uCZu9xWblgu7sRWvVP1i6q+YRQFLHZffL/XJGCmcpg=,tag:PJdmgsDtwkK5CmA3r7AW5A==,type:str]
privateKeySecretRef:
name: ENC[AES256_GCM,data:Vg4c9Mu5V159/QXz2I3qe45cTQ==,iv:aUvbj+Kx3VmDmxx+QWIjpfo3C4Nc08phZhQwWpfNE88=,tag:90ey7W5TL2G+hPtEG3THZw==,type:str]
solvers:
- http01:
ingress:
class: ENC[AES256_GCM,data:zIu3D/s=,iv:+Uv62H9i0VGkSufnt3cjjX4VBvr6ONo6tvQzH6r8BxU=,tag:pY57Mbuyg/wwzCTkLoFx4A==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxa1B0c2F2TG85RUZqVkRu
RmpYY1d4Rm01NlJPZlVHcDQ1cEl3ZzR3OENBClgzTXAwdDJuZTJ3dGF0N3hzVXJY
VkZEdENaMForSVFIbTg2YmVGelhBMncKLS0tIEJtTmFvKzNYRHEyZk94cGMrTnF6
ZTVLMnBudHVqTzB4eUNrQXBid0c1SUEKEMhX2k0MNYt5rrgMRy3QTIOiIuP0lwJ7
2Pyg7kj2RTQu2plwRZBNzQ2kBfCBkx06MBaJASHHsBQIPUZhtMLelA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-15T23:47:15Z"
mac: ENC[AES256_GCM,data:B1opGlOCwM0nCFRWLdpteNuCAb06emGf0I0KKOhlNh0u36DTr1aVRzGV57sJRi8b4rSwPBucP2WzIKFAHY5yKincGdHwPwQ40dun0TreaJrtXiJagz19n2nqc2vZfzlE9G8QdG6Bnos17UaB5b+I5dWYlz1XM8oYOk0pdzrCGas=,iv:fuC+7nKNxHfn+Q7psFQmweRIUFzIcBuZN3rESFmnJL0=,tag:IEVeHB4Kol9GNHJOolamRA==,type:str]
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.11.0
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
email: ENC[AES256_GCM,data:WROzrrll22ZOAA4i,iv:6c6oni+U4kJO7wKSPVmnkvIyesYR/vYvK0qTY/9RslQ=,tag:d4thMfoyWRU8kPOCaptTng==,type:str]
server: ENC[AES256_GCM,data:hr4tgxj0GJM9oKaMaUjqUBdWByhOwYAQaavPiIYO/vVthmTTG6BY5/5iWa/xMA==,iv:hkuwiVGelzxSeIEBHNpe1tFQm1LjpiQIPfC2hliMQLg=,tag:b9sN3ffRKq9/y+QuBkl0og==,type:str]
privateKeySecretRef:
name: ENC[AES256_GCM,data:6euJ7/Fiu/4DcLY0CK4f3g==,iv:9hLzhVY7/3uWXKrfgvXAOXudgGMc11JiDFuDD297WvY=,tag:ujjexmTBX7PtClg3iGsaCw==,type:str]
solvers:
- http01:
ingress:
class: ENC[AES256_GCM,data:6xOo5yo=,iv:g1GO+PME54KZNzrf1mZC+0G8aw+XJ1CEw+i8NakqVPM=,tag:NaIyYrnJOMPsLdoNBCqMFQ==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSGhmM2F4Y0VSRzhWSWRX
cU95OGFNRUxNM1FucTBVOFlpUHdBbFIwSWs0ClZvblN0OGtSbWdSZ0RUTVZHV3FK
QW9mck9TOWt4ejdiT0ZHak9BdWlnemMKLS0tIHpNNUh3b0NFNlBQckZQZzc4cVgx
ais3c3orMDcxbjlIUnZlbEZyVVZUTTQKbOMIUUOKX4b3qDsQhrkqWpsuJcSISc9R
Zg3Y5Ph5iJxrxmftDA4rxl0WFfGhI67JCTKPDpN0Dzfm663eMnKe1g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-15T23:47:15Z"
mac: ENC[AES256_GCM,data:pUXu12zIDvUG1+Qfu2gvYmnLfSMNAl3DU4Z1ZPIYVBg0XX6btEyO8o9TXssoG6efIH+FrMkNVj41BMIdJnp12zcjMyUcD9GKvlJIYQla59uy/XBVArgvgYF8iBaz6PfzTFVYPUoP2WPi7Q9L3w12jsw1wRyEpYshAFtVJxtvhCg=,iv:o9oatVlXBl682FYCnFbqcNxQ0sKLlj2qI4m1k1seVKE=,tag:t46aEUU7RWHA/vPTFPinew==,type:str]
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.11.0