Dustin C. Hatch
f7a8f391ea
The *dch-webhooks* tool now provides an operation for hosts to request a signed SSH certificate from the SSH CA. It's primarily useful for unattended deployments like CoreOS Ignition, where hosts do not have any credentials to authenticate with the CA directly.
26 lines
380 B
YAML
26 lines
380 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- ../dch-root-ca
|
|
- dch-webhooks.yaml
|
|
- ingress.yaml
|
|
|
|
configMapGenerator:
|
|
- name: dch-webhooks
|
|
envs:
|
|
- dch-webhooks.env
|
|
|
|
secretGenerator:
|
|
- name: firefly-token
|
|
files:
|
|
- firefly.token
|
|
|
|
- name: paperless-token
|
|
files:
|
|
- paperless.token
|
|
|
|
- name: step-ca-password
|
|
files:
|
|
- provisioner.password
|