mirror of https://github.com/grafana/loki
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
379 lines
8.6 KiB
379 lines
8.6 KiB
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: kind-cluster-issuer
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-signing-ca
|
|
spec:
|
|
isCA: true
|
|
commonName: lokistack-dev-gateway-http.default.svc
|
|
dnsNames:
|
|
- "*.default.svc"
|
|
- "*.default.svc.cluster.local"
|
|
secretName: lokistack-dev-signing-ca
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
size: 256
|
|
issuerRef:
|
|
name: kind-cluster-issuer
|
|
kind: ClusterIssuer
|
|
group: cert-manager.io
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Issuer
|
|
metadata:
|
|
name: kind-issuer
|
|
spec:
|
|
ca:
|
|
secretName: lokistack-dev-signing-ca
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-gateway-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-gateway-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-gateway-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-gateway-http.default.svc"
|
|
- "lokistack-dev-gateway-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-gateway-client-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-gateway-client-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-gateway-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-distributor-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-distributor-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-distributor-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-distributor-grpc.default.svc"
|
|
- "lokistack-dev-distributor-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-distributor-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-distributor-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-distributor-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-distributor-http.default.svc"
|
|
- "lokistack-dev-distributor-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-ingester-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-ingester-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-ingester-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-ingester-grpc.default.svc"
|
|
- "lokistack-dev-ingester-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-ingester-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-ingester-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-ingester-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-ingester-http.default.svc"
|
|
- "lokistack-dev-ingester-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-query-frontend-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-query-frontend-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-query-frontend-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-query-frontend-grpc.default.svc"
|
|
- "lokistack-dev-query-frontend-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-query-frontend-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-query-frontend-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-query-frontend-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-query-frontend-http.default.svc"
|
|
- "lokistack-dev-query-frontend-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-querier-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-querier-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-querier-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-querier-grpc.default.svc"
|
|
- "lokistack-dev-querier-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-querier-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-querier-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-querier-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-querier-http.default.svc"
|
|
- "lokistack-dev-querier-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-index-gateway-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-index-gateway-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-index-gateway-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-index-gateway-grpc.default.svc"
|
|
- "lokistack-dev-index-gateway-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-index-gateway-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-index-gateway-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-index-gateway-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-index-gateway-http.default.svc"
|
|
- "lokistack-dev-index-gateway-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-compactor-grpc
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-compactor-grpc
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-compactor-grpc.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-compactor-grpc.default.svc"
|
|
- "lokistack-dev-compactor-grpc.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: lokistack-dev-compactor-http
|
|
namespace: default
|
|
spec:
|
|
secretName: lokistack-dev-compactor-http
|
|
duration: 2160h # 90d
|
|
renewBefore: 360h # 15d
|
|
commonName: lokistack-dev-compactor-http.default.svc
|
|
privateKey:
|
|
rotationPolicy: Never
|
|
algorithm: ECDSA
|
|
encoding: PKCS8
|
|
size: 256
|
|
usages:
|
|
- client auth
|
|
- server auth
|
|
dnsNames:
|
|
- "lokistack-dev-compactor-http.default.svc"
|
|
- "lokistack-dev-compactor-http.default.svc.cluster.local"
|
|
issuerRef:
|
|
name: kind-issuer
|
|
kind: Issuer
|
|
|