From 0401217d95e7257280444ddebac512c4bdc37dd6 Mon Sep 17 00:00:00 2001
From: Christian Lempa <christian.lempa@clcreative.de>
Date: Tue, 1 Nov 2022 07:11:01 +0100
Subject: [PATCH] cert-manager updates

---
 kubernetes/certmanager/templates/certificate.yaml    | 12 ++++++++++++
 .../certmanager/templates/clusterissuer-acme.yml     |  6 +-----
 .../templates/clusterissuer-selfsigned.yml           |  3 ---
 kubernetes/certmanager/templates/issuer-acme.yml     |  3 +--
 4 files changed, 14 insertions(+), 10 deletions(-)
 create mode 100644 kubernetes/certmanager/templates/certificate.yaml

diff --git a/kubernetes/certmanager/templates/certificate.yaml b/kubernetes/certmanager/templates/certificate.yaml
new file mode 100644
index 0000000..a48c792
--- /dev/null
+++ b/kubernetes/certmanager/templates/certificate.yaml
@@ -0,0 +1,12 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: your-certificate
+  namespace: your-namespace
+spec:
+  secretName: your-secret
+  issuerRef:
+    name: ssl-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - your-hostname
\ No newline at end of file
diff --git a/kubernetes/certmanager/templates/clusterissuer-acme.yml b/kubernetes/certmanager/templates/clusterissuer-acme.yml
index d731713..da57efb 100644
--- a/kubernetes/certmanager/templates/clusterissuer-acme.yml
+++ b/kubernetes/certmanager/templates/clusterissuer-acme.yml
@@ -2,9 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: acme-issuer
-  # (Optional) Metadata
-  # ---
-  # namespace: your-namespace
 spec:
   acme:
     # Configure your email here...
@@ -42,9 +39,8 @@ spec:
       # (Optional) Add DNS selectors
       # ---
       # selector:
-      #   dnsNames:
+      #   dnsZones:
       #   - 'your-domain'
-      #   - '*.your-domain'
 
     # HTTP Challenge:
     # - http01:
diff --git a/kubernetes/certmanager/templates/clusterissuer-selfsigned.yml b/kubernetes/certmanager/templates/clusterissuer-selfsigned.yml
index a01e326..7820a9b 100644
--- a/kubernetes/certmanager/templates/clusterissuer-selfsigned.yml
+++ b/kubernetes/certmanager/templates/clusterissuer-selfsigned.yml
@@ -2,8 +2,5 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: selfsigned-issuer
-  # (Optional) Metadata
-  # ---
-  # namespace: your-namespace
 spec:
   selfSigned: {}
\ No newline at end of file
diff --git a/kubernetes/certmanager/templates/issuer-acme.yml b/kubernetes/certmanager/templates/issuer-acme.yml
index a36c969..359b5bb 100644
--- a/kubernetes/certmanager/templates/issuer-acme.yml
+++ b/kubernetes/certmanager/templates/issuer-acme.yml
@@ -42,9 +42,8 @@ spec:
       # (Optional) Add DNS selectors
       # ---
       # selector:
-      #   dnsNames:
+      #   dnsZones:
       #   - 'your-domain'
-      #   - '*.your-domain'
 
     # HTTP Challenge:
     # - http01: