KubeZero/charts/kubezero-cert-manager/README.md

kubezero-cert-manager

KubeZero Umbrella Chart for cert-manager

Current chart version is 0.3.5

Source code can be found here

Chart Requirements

Repository	Name	Version
https://charts.jetstack.io	cert-manager	0.15.1
https://zero-down-time.github.io/kubezero/	kubezero-lib	>= 0.1.1

AWS - IAM Role

If you use kiam or kube2iam and restrict access on nodes running cert-manager please adjust:

cert-manager.podAnnotations:
  iam.amazonaws.com/role: <ROLE>

Resolver Secrets

If your resolvers need additional sercrets like CloudFlare API tokens etc. make sure to provide these secrets separatly matching your defined issuers.

Chart Values

Key	Type	Default	Description
cert-manager.cainjector.nodeSelector."node-role.kubernetes.io/master"	string	""
cert-manager.cainjector.tolerations[0].effect	string	"NoSchedule"
cert-manager.cainjector.tolerations[0].key	string	"node-role.kubernetes.io/master"
cert-manager.extraArgs[0]	string	"--dns01-recursive-nameservers-only"
cert-manager.ingressShim.defaultIssuerKind	string	"ClusterIssuer"
cert-manager.ingressShim.defaultIssuerName	string	"letsencrypt-dns-prod"
cert-manager.installCRDs	bool	true
cert-manager.nodeSelector."node-role.kubernetes.io/master"	string	""
cert-manager.podAnnotations	object	{}	"iam.amazonaws.com/roleIAM:" role ARN the cert-manager might use via kiam eg."arn:aws:iam::123456789012:role/certManagerRoleArn"
cert-manager.prometheus.servicemonitor.enabled	bool	false
cert-manager.tolerations[0].effect	string	"NoSchedule"
cert-manager.tolerations[0].key	string	"node-role.kubernetes.io/master"
cert-manager.webhook.nodeSelector."node-role.kubernetes.io/master"	string	""
cert-manager.webhook.tolerations[0].effect	string	"NoSchedule"
cert-manager.webhook.tolerations[0].key	string	"node-role.kubernetes.io/master"
clusterIssuer	object	{}
localCA.enabled	bool	true
localCA.selfsigning	bool	true