Initial commit.

infrastructure_setup/cert-manager/wildcard-certificate.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-sovereign-cloud
+  namespace: default
+spec:
+  secretName: wildcard-sovereign-cloud-tls
+  dnsNames:
+  - "*.${DOMAIN}"
+  - "${DOMAIN}"
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  duration: 2160h # 90 days
+  renewBefore: 360h # 15 days
+  privateKey:
+    algorithm: RSA
+    size: 2048