In-cluster services can now get certificates signed by the DCH CA via `step-ca`. This issuer uses ACME with the HTTP-01 challenge, so it can only issue certificates for names in the _pyrocufflink.blue_ zone that point to the ingress controllers. |
||
---|---|---|
.. | ||
.gitignore | ||
cert-exporter.yaml | ||
certificates.yaml | ||
cluster-issuer.yaml | ||
dch-ca-issuer.yaml | ||
kustomization.yaml | ||
ssh_known_hosts |