e

apps/templates/cert-manager.yaml

@@ -70,23 +70,27 @@ spec:
     # The default value is Issuer (i.e. a locally namespaced Issuer)
     kind: ClusterIssuer
 ---
-apiVersion: extensions/v1beta1
+apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    cert-manager.io/acme-challenge-type: dns01
+    # add an annotation indicating the issuer to use.
     cert-manager.io/cluster-issuer: test-roxedus-com
-  name: ingress-rule
+  name: myIngress
   namespace: default
 spec:
   rules:
-  - host: hostname
+  - host: test.example.com
     http:
       paths:
-      - backend:
-          serviceName: backend-service
-          servicePort: 8080
-  tls:
+      - pathType: Prefix
+        path: /
+        backend:
+          service:
+            name: myservice
+            port:
+              number: 80
+  tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
   - hosts:
     - test.roxedus.com
-    secretName: test-roxedus-com
+    secretName: test-roxedus-com_cert # < cert-manager will store the created certificate in this secret.