kind: Certificate

kind: Certificate(doc)

Example

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: your-cert
spec:
  secretName: acme-crt-secret
  dnsNames:
  - example.com
  - foo.example.com
  issuerRef:
    name: letsencrypt-prod
    # We can reference ClusterIssuers by changing the kind here.
    # The default value is Issuer (i.e. a locally namespaced Issuer)
    kind: Issuer
    group: cert-manager.io

Gemini example

 apiVersion: cert-manager.io/v1
kind: Certificate
spec:
  secretName: temporal-internode-cert
  usages:
    - server auth
    - client auth
  dnsNames:
    - temporal-internode

Create certificate

kubectl apply -f certificate.yml
certificate.cert-manager.io/your-cert created

Describe certificate

kubectl describe cert your-cert && kubectl describe certificaterequest your-cert && kubectl describe challenge

Related

• kind: ClusterIssuer
• certificates.k8s.io
• kubectl get issuer
• kubectl delete certificate
• kubectl describe challenges
• kubectl get cr
• kind: Order
• Temporal TLS: /etc/temporal/certs/

See also

• kubectl certificate [ approve ]
• kind: Certificate, kind: Order, kind: Challenge, kubectl describe certificate
• kind: ClusterIssuer, kubectl get clusterissuers, kubectl describe clusterissuers