apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: kind-cluster-issuer
spec:
  selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-signing-ca
spec:
  isCA: true
  commonName: lokistack-dev-gateway-http.default.svc
  dnsNames:
  - "*.default.svc"
  - "*.default.svc.cluster.local"
  secretName: lokistack-dev-signing-ca
  privateKey:
    algorithm: ECDSA
    size: 256
  issuerRef:
    name: kind-cluster-issuer
    kind: ClusterIssuer
    group: cert-manager.io
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: kind-issuer
spec:
  ca:
    secretName: lokistack-dev-signing-ca
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-gateway-http
  namespace: default
spec:
  secretName: lokistack-dev-gateway-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-gateway-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-gateway-http.default.svc"
  - "lokistack-dev-gateway-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-gateway-client-http
  namespace: default
spec:
  secretName: lokistack-dev-gateway-client-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-gateway-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-distributor-grpc
  namespace: default
spec:
  secretName: lokistack-dev-distributor-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-distributor-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-distributor-grpc.default.svc"
  - "lokistack-dev-distributor-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-distributor-http
  namespace: default
spec:
  secretName: lokistack-dev-distributor-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-distributor-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-distributor-http.default.svc"
  - "lokistack-dev-distributor-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-ingester-grpc
  namespace: default
spec:
  secretName: lokistack-dev-ingester-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-ingester-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-ingester-grpc.default.svc"
  - "lokistack-dev-ingester-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-ingester-http
  namespace: default
spec:
  secretName: lokistack-dev-ingester-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-ingester-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-ingester-http.default.svc"
  - "lokistack-dev-ingester-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-query-frontend-grpc
  namespace: default
spec:
  secretName: lokistack-dev-query-frontend-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-query-frontend-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-query-frontend-grpc.default.svc"
  - "lokistack-dev-query-frontend-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-query-frontend-http
  namespace: default
spec:
  secretName: lokistack-dev-query-frontend-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-query-frontend-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-query-frontend-http.default.svc"
  - "lokistack-dev-query-frontend-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-querier-grpc
  namespace: default
spec:
  secretName: lokistack-dev-querier-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-querier-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-querier-grpc.default.svc"
  - "lokistack-dev-querier-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-querier-http
  namespace: default
spec:
  secretName: lokistack-dev-querier-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-querier-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-querier-http.default.svc"
  - "lokistack-dev-querier-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-index-gateway-grpc
  namespace: default
spec:
  secretName: lokistack-dev-index-gateway-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-index-gateway-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-index-gateway-grpc.default.svc"
  - "lokistack-dev-index-gateway-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-index-gateway-http
  namespace: default
spec:
  secretName: lokistack-dev-index-gateway-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-index-gateway-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-index-gateway-http.default.svc"
  - "lokistack-dev-index-gateway-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-compactor-grpc
  namespace: default
spec:
  secretName: lokistack-dev-compactor-grpc
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-compactor-grpc.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-compactor-grpc.default.svc"
  - "lokistack-dev-compactor-grpc.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: lokistack-dev-compactor-http
  namespace: default
spec:
  secretName: lokistack-dev-compactor-http
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  commonName: lokistack-dev-compactor-http.default.svc
  privateKey:
    rotationPolicy: Never
    algorithm: ECDSA
    encoding: PKCS8
    size: 256
  usages:
    - client auth
    - server auth
  dnsNames:
  - "lokistack-dev-compactor-http.default.svc"
  - "lokistack-dev-compactor-http.default.svc.cluster.local"
  issuerRef:
    name: kind-issuer
    kind: Issuer