k3s-cluster/kubernetes/thin/apps/nginx/wildcard-cert/wildcard-cert.yaml

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: wildcard-main-cert
  namespace: nginx
spec:
  secretName: wildcard-main-tls

  duration: 2160h # 90d
  renewBefore: 360h # 15d

  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer

  dnsNames:
    - "${SECRET_NEW_DOMAIN}"
    - "*.${SECRET_NEW_DOMAIN}"
    - "*.internal.${SECRET_NEW_DOMAIN}"
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`apiVersion: cert-manager.io/v1`
			`kind: Certificate`
			`metadata:`
			`name: wildcard-main-cert`
feat: switch from traefik to nginx-ingress 2024-09-15 22:14:23 +00:00			`namespace: nginx`
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`spec:`
			`secretName: wildcard-main-tls`

			`duration: 2160h # 90d`
			`renewBefore: 360h # 15d`

			`issuerRef:`
Use correct issuerRef name 2023-04-13 05:25:19 +00:00			`name: letsencrypt-production`
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`kind: ClusterIssuer`

			`dnsNames:`
fix: add root domain to certificate 2024-07-03 19:54:03 +00:00			`- "${SECRET_NEW_DOMAIN}"`
fix: change load balancer subnet, make certs valid for '*.internal' domains 2024-09-12 21:52:21 +00:00			`- "*.${SECRET_NEW_DOMAIN}"`
			`- "*.internal.${SECRET_NEW_DOMAIN}"`