k3s-cluster/kubernetes/main/core/traefik/app/wildcard-cert.yaml

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: wildcard-main-cert
  namespace: traefik
spec:
  secretName: wildcard-main-tls

  duration: 2160h # 90d
  renewBefore: 360h # 15d

  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer

  dnsNames:
    - "${SECRET_NEW_DOMAIN}"
    - "*.${SECRET_NEW_DOMAIN}"
    - "*.internal.${SECRET_NEW_DOMAIN}"
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`apiVersion: cert-manager.io/v1`
			`kind: Certificate`
			`metadata:`
			`name: wildcard-main-cert`
feat: cert-manager ca for internal certs, enable tls for postgres also fix: incorrect namespace for wildcard cert 2024-09-20 00:28:32 +00:00			`namespace: traefik`
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`spec:`
			`secretName: wildcard-main-tls`

			`duration: 2160h # 90d`
			`renewBefore: 360h # 15d`

			`issuerRef:`
Use correct issuerRef name 2023-04-13 05:25:19 +00:00			`name: letsencrypt-production`
Create a wildcard cert with cert-manager and replicate with kubernetes-replicator 2023-04-13 04:52:05 +00:00			`kind: ClusterIssuer`

			`dnsNames:`
fix: add root domain to certificate 2024-07-03 19:54:03 +00:00			`- "${SECRET_NEW_DOMAIN}"`
fix: change load balancer subnet, make certs valid for '*.internal' domains 2024-09-12 21:52:21 +00:00			`- "*.${SECRET_NEW_DOMAIN}"`
			`- "*.internal.${SECRET_NEW_DOMAIN}"`