wikibase-cloud-clusterissuers v0.2.1 (#184)

* use self-signed ca bootstrapping * version bump
wbstack · Dec 19, 2024 · d20ff7f · d20ff7f
1 parent 7acaf39
commit d20ff7f
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 2 deletions.
diff --git a/charts/wikibase-cloud-clusterissuers/Chart.yaml b/charts/wikibase-cloud-clusterissuers/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: "1.0"
 description: A Helm chart for Kubernetes
 name: wikibase-cloud-clusterissuers
-version: 0.2.0
+version: 0.2.1
 maintainers:
   - name: WBstack
     url: https://github.com/wbstack
diff --git a/charts/wikibase-cloud-clusterissuers/README.md b/charts/wikibase-cloud-clusterissuers/README.md
@@ -5,5 +5,6 @@ This chart deploys cert-manager `ClusterIssuer` resources, which represent CAs t
 https://cert-manager.io/docs/configuration/
 
 ## changelog
+- 0.2.1: Add self-signed CA bootstrapping (docs: https://cert-manager.io/docs/configuration/selfsigned/#bootstrapping-ca-issuers)
 - 0.2.0: Add self-signed cluster issuer for local environment
-- 0.1.0: Initial tag
+- 0.1.0: Initial tag
diff --git a/charts/wikibase-cloud-clusterissuers/templates/local.yaml b/charts/wikibase-cloud-clusterissuers/templates/local.yaml
@@ -5,3 +5,29 @@ metadata:
   namespace: cert-manager
 spec:
   selfSigned: {}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wikibase-local-root-ca
+  namespace: cert-manager
+spec:
+  isCA: true
+  commonName: wikibase-local-root-ca
+  secretName: wikibase-local-root-secret
+  privateKey:
+    algorithm: ECDSA
+    size: 256
+  issuerRef:
+    name: selfsigned-cluster-issuer
+    kind: ClusterIssuer
+    group: cert-manager.io
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: wikibase-local-issuer
+  namespace: cert-manager
+spec:
+  ca:
+    secretName: wikibase-local-root-secret