Files
qinglong/deploy/kubernetes/ql3-worker/identity.example.yaml
T

23 lines
695 B
YAML

# Example only. Populate through a Secret manager and never commit a real
# Worker private key. The ql3w credential is delivered into the separate
# ql3-worker-credential Secret by the short-lived cluster-admin adapter.
apiVersion: v1
kind: Secret
metadata:
name: ql3-worker-identity
namespace: qinglong3-worker
type: Opaque
stringData:
ca.crt: |
-----BEGIN CERTIFICATE-----
REPLACE_WITH_WORKER_INGRESS_CLIENT_CA
-----END CERTIFICATE-----
tls.key: |
-----BEGIN PRIVATE KEY-----
REPLACE_WITH_THIS_WORKER_PRIVATE_KEY
-----END PRIVATE KEY-----
tls.crt: |
-----BEGIN CERTIFICATE-----
REPLACE_WITH_THIS_WORKER_CERTIFICATE_CHAIN
-----END CERTIFICATE-----