feat: enable setting ssl common name
template, documentation, default values.yaml for value ssl.Commonname to support vault-issuer vault-issuer (k8s clusterIssuer) requires CN to be set by default closes: emqx#11199
This commit is contained in:
parent
353cc065db
commit
f415af7225
|
@ -100,6 +100,7 @@ The following table lists the configurable parameters of the emqx chart and thei
|
||||||
| `ssl.useExisting` | Use existing certificate or let cert-manager generate one | false |
|
| `ssl.useExisting` | Use existing certificate or let cert-manager generate one | false |
|
||||||
| `ssl.existingName` | Name of existing certificate | emqx-tls |
|
| `ssl.existingName` | Name of existing certificate | emqx-tls |
|
||||||
| `ssl.dnsnames` | DNS name(s) for certificate to be generated | {} |
|
| `ssl.dnsnames` | DNS name(s) for certificate to be generated | {} |
|
||||||
|
| `ssl.commonName` | Common name for or certificate to be generated | |
|
||||||
| `ssl.issuer.name` | Issuer name for certificate generation | letsencrypt-dns |
|
| `ssl.issuer.name` | Issuer name for certificate generation | letsencrypt-dns |
|
||||||
| `ssl.issuer.kind` | Issuer kind for certificate generation | ClusterIssuer |
|
| `ssl.issuer.kind` | Issuer kind for certificate generation | ClusterIssuer |
|
||||||
|
|
||||||
|
|
|
@ -9,6 +9,9 @@ spec:
|
||||||
issuerRef:
|
issuerRef:
|
||||||
name: {{ default "letsencrypt-staging" .Values.ssl.issuer.name }}
|
name: {{ default "letsencrypt-staging" .Values.ssl.issuer.name }}
|
||||||
kind: {{ default "ClusterIssuer" .Values.ssl.issuer.kind }}
|
kind: {{ default "ClusterIssuer" .Values.ssl.issuer.kind }}
|
||||||
|
{{- if .Values.ssl.commonName }}
|
||||||
|
commonName: {{ .Values.ssl.commonName }}
|
||||||
|
{{- end }}
|
||||||
dnsNames:
|
dnsNames:
|
||||||
{{- range .Values.ssl.dnsnames }}
|
{{- range .Values.ssl.dnsnames }}
|
||||||
- {{ . }}
|
- {{ . }}
|
||||||
|
|
|
@ -237,6 +237,7 @@ ssl:
|
||||||
useExisting: false
|
useExisting: false
|
||||||
existingName: emqx-tls
|
existingName: emqx-tls
|
||||||
dnsnames: []
|
dnsnames: []
|
||||||
|
commonName:
|
||||||
issuer:
|
issuer:
|
||||||
name: letsencrypt-dns
|
name: letsencrypt-dns
|
||||||
kind: ClusterIssuer
|
kind: ClusterIssuer
|
||||||
|
|
|
@ -99,6 +99,7 @@ The following table lists the configurable parameters of the emqx chart and thei
|
||||||
| `ssl.enabled` | Enable SSL support | false |
|
| `ssl.enabled` | Enable SSL support | false |
|
||||||
| `ssl.useExisting` | Use existing certificate or let cert-manager generate one | false |
|
| `ssl.useExisting` | Use existing certificate or let cert-manager generate one | false |
|
||||||
| `ssl.existingName` | Name of existing certificate | emqx-tls |
|
| `ssl.existingName` | Name of existing certificate | emqx-tls |
|
||||||
|
| `ssl.commonName` | Common name for or certificate to be generated | |
|
||||||
| `ssl.dnsnames` | DNS name(s) for certificate to be generated | {} |
|
| `ssl.dnsnames` | DNS name(s) for certificate to be generated | {} |
|
||||||
| `ssl.issuer.name` | Issuer name for certificate generation | letsencrypt-dns |
|
| `ssl.issuer.name` | Issuer name for certificate generation | letsencrypt-dns |
|
||||||
| `ssl.issuer.kind` | Issuer kind for certificate generation | ClusterIssuer |
|
| `ssl.issuer.kind` | Issuer kind for certificate generation | ClusterIssuer |
|
||||||
|
|
|
@ -9,6 +9,9 @@ spec:
|
||||||
issuerRef:
|
issuerRef:
|
||||||
name: {{ default "letsencrypt-staging" .Values.ssl.issuer.name }}
|
name: {{ default "letsencrypt-staging" .Values.ssl.issuer.name }}
|
||||||
kind: {{ default "ClusterIssuer" .Values.ssl.issuer.kind }}
|
kind: {{ default "ClusterIssuer" .Values.ssl.issuer.kind }}
|
||||||
|
{{- if .Values.ssl.commonName }}
|
||||||
|
commonName: {{ .Values.ssl.commonName }}
|
||||||
|
{{- end }}
|
||||||
dnsNames:
|
dnsNames:
|
||||||
{{- range .Values.ssl.dnsnames }}
|
{{- range .Values.ssl.dnsnames }}
|
||||||
- {{ . }}
|
- {{ . }}
|
||||||
|
|
|
@ -240,6 +240,7 @@ ssl:
|
||||||
useExisting: false
|
useExisting: false
|
||||||
existingName: emqx-tls
|
existingName: emqx-tls
|
||||||
dnsnames: []
|
dnsnames: []
|
||||||
|
commonName:
|
||||||
issuer:
|
issuer:
|
||||||
name: letsencrypt-dns
|
name: letsencrypt-dns
|
||||||
kind: ClusterIssuer
|
kind: ClusterIssuer
|
||||||
|
|
Loading…
Reference in New Issue