|
@@ -46,7 +46,7 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
helm install cert-manager jetstack/cert-manager \
|
|
helm install cert-manager jetstack/cert-manager \
|
|
--namespace cert-manager \
|
|
--namespace cert-manager \
|
|
--create-namespace \
|
|
--create-namespace \
|
|
- --version v1.15.2 \
|
|
|
|
|
|
+ --version v1.16.2 \
|
|
--set installCRDs=true
|
|
--set installCRDs=true
|
|
```
|
|
```
|
|
|
|
|
|
@@ -84,7 +84,7 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
在阿里云控制台创建一个RAM用户,并赋予DNSFullAccess 策略。在这个用户下创建access key。然后在k8s 创建secret:
|
|
在阿里云控制台创建一个RAM用户,并赋予DNSFullAccess 策略。在这个用户下创建access key。然后在k8s 创建secret:
|
|
|
|
|
|
```sh
|
|
```sh
|
|
- kubectl -n cert-manager create secret generic alidns-secrets --from-literal="access-key-id=yourtoken" --from-literal="access-key-secret=yoursecretkey"
|
|
|
|
|
|
+ kubectl -n cert-manager create secret generic alidns-secrets --from-literal="access-token=yourtoken" --from-literal="secret-key=yoursecretkey"
|
|
```
|
|
```
|
|
|
|
|
|
确保将 `yourtoken`和`yoursecretkey` 修改成从阿里云控制台获得的 AK/SK。
|
|
确保将 `yourtoken`和`yoursecretkey` 修改成从阿里云控制台获得的 AK/SK。
|
|
@@ -115,12 +115,12 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
solverName: alidns-solver
|
|
solverName: alidns-solver
|
|
config:
|
|
config:
|
|
regionId: cn-beijing
|
|
regionId: cn-beijing
|
|
- accessKeySecretRef:
|
|
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-id
|
|
|
|
|
|
+ accessTokenSecretRef:
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: access-token
|
|
secretKeySecretRef:
|
|
secretKeySecretRef:
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-secret
|
|
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: secret-key
|
|
selector:
|
|
selector:
|
|
dnsZones:
|
|
dnsZones:
|
|
- yourdomain.com
|
|
- yourdomain.com
|
|
@@ -144,12 +144,12 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
solverName: alidns-solver
|
|
solverName: alidns-solver
|
|
config:
|
|
config:
|
|
regionId: cn-beijing
|
|
regionId: cn-beijing
|
|
- accessKeySecretRef:
|
|
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-id
|
|
|
|
|
|
+ accessTokenSecretRef:
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: access-token
|
|
secretKeySecretRef:
|
|
secretKeySecretRef:
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-secret
|
|
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: secret-key
|
|
selector:
|
|
selector:
|
|
dnsZones:
|
|
dnsZones:
|
|
- yourdomain.com
|
|
- yourdomain.com
|
|
@@ -191,12 +191,12 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
solverName: alidns-solver
|
|
solverName: alidns-solver
|
|
config:
|
|
config:
|
|
regionId: cn-beijing
|
|
regionId: cn-beijing
|
|
- accessKeySecretRef:
|
|
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-id
|
|
|
|
|
|
+ accessTokenSecretRef:
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: access-token
|
|
secretKeySecretRef:
|
|
secretKeySecretRef:
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-secret
|
|
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: secret-key
|
|
selector:
|
|
selector:
|
|
dnsZones:
|
|
dnsZones:
|
|
- yourdomain.com
|
|
- yourdomain.com
|
|
@@ -221,12 +221,12 @@ export no_proxy=.cn,.aliyun.com,.aliyuncs.com,.163.com,.baiduce.com,.qiniu.com,.
|
|
solverName: alidns-solver
|
|
solverName: alidns-solver
|
|
config:
|
|
config:
|
|
regionId: cn-beijing
|
|
regionId: cn-beijing
|
|
- accessKeySecretRef:
|
|
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-id
|
|
|
|
|
|
+ accessTokenSecretRef:
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: access-token
|
|
secretKeySecretRef:
|
|
secretKeySecretRef:
|
|
- name: alidns-secret
|
|
|
|
- key: access-key-secret
|
|
|
|
|
|
+ name: alidns-secrets
|
|
|
|
+ key: secret-key
|
|
selector:
|
|
selector:
|
|
dnsZones:
|
|
dnsZones:
|
|
- yourdomain.com
|
|
- yourdomain.com
|