Files
snow/apps/postgres/certs.yaml

44 lines
964 B
YAML

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: postgres-server-cert
namespace: postgres
spec:
secretName: postgres-server-cert
secretTemplate:
labels:
cnpg.io/reload: ""
usages:
- server auth
dnsNames:
- postgres-cluster-rw
- postgres-cluster-rw.postgres
- postgres-cluster-rw.postgres.svc
- postgres-cluster-r
- postgres-cluster-r.postgres
- postgres-cluster-r.postgres.svc
- postgres-cluster-ro
- postgres-cluster-ro.postgres
- postgres-cluster-ro.postgres.svc
issuerRef:
name: postgres-ca
kind: ClusterIssuer
group: cert-manager.io
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: postgres-replication-cert
spec:
secretName: postgres-replication-cert
secretTemplate:
labels:
cnpg.io/reload: ""
usages:
- client auth
commonName: streaming_replica
issuerRef:
name: postgres-ca
kind: ClusterIssuer
group: cert-manager.io