From cb13c2cf8a4b7a44bcff0027755b27c06c61b8df Mon Sep 17 00:00:00 2001 From: Aljoscha Poertner Date: Tue, 26 Oct 2021 13:48:22 +0200 Subject: [PATCH 1/5] docs(kubed): Add hyperlink for CertificateSecretTemplate Signed-off-by: Aljoscha Poertner --- content/en/docs/faq/kubed.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/docs/faq/kubed.md b/content/en/docs/faq/kubed.md index fff6953d170..a058cda7f8b 100644 --- a/content/en/docs/faq/kubed.md +++ b/content/en/docs/faq/kubed.md @@ -73,3 +73,5 @@ spec: kind: Issuer group: cert-manager.io ``` + +[CertificateSecretTemplate]: ../../reference/api-docs/#cert-manager.io/v1alpha3.CertificateSecretTemplate \ No newline at end of file From dfc82ae16f535f123e526443d3c8d9df28a7feae Mon Sep 17 00:00:00 2001 From: Aljoscha Poertner Date: Tue, 26 Oct 2021 13:50:55 +0200 Subject: [PATCH 2/5] docs(kubed): Use secretTemplate instead of pre-created secret in example Signed-off-by: Aljoscha Poertner --- content/en/docs/faq/kubed.md | 16 +++------------- 1 file changed, 3 insertions(+), 13 deletions(-) diff --git a/content/en/docs/faq/kubed.md b/content/en/docs/faq/kubed.md index a058cda7f8b..4552517d7a6 100644 --- a/content/en/docs/faq/kubed.md +++ b/content/en/docs/faq/kubed.md @@ -47,19 +47,6 @@ metadata: labels: cert-manager-tls: sandbox # Define namespace label for kubed --- -apiVersion: v1 -data: - ca.crt: '' - tls.crt: '' - tls.key: '' -kind: Secret -metadata: - name: sandbox-tls - namespace: cert-manager - annotations: - kubed.appscode.com/sync: "cert-manager-tls=sandbox" # Sync certificate to matching namespaces -type: kubernetes.io/tls ---- apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -72,6 +59,9 @@ spec: name: sandbox-ca kind: Issuer group: cert-manager.io + secretTemplate: + annotations: + kubed.appscode.com/sync: "cert-manager-tls=sandbox" # Sync certificate to matching namespaces ``` [CertificateSecretTemplate]: ../../reference/api-docs/#cert-manager.io/v1alpha3.CertificateSecretTemplate \ No newline at end of file From 480db375270f480c0c448a933114980541cfcc41 Mon Sep 17 00:00:00 2001 From: Aljoscha Poertner Date: Tue, 26 Oct 2021 13:56:04 +0200 Subject: [PATCH 3/5] docs(kubed): Update the description to match the example Signed-off-by: Aljoscha Poertner --- content/en/docs/faq/kubed.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/content/en/docs/faq/kubed.md b/content/en/docs/faq/kubed.md index 4552517d7a6..3146b0d2e12 100644 --- a/content/en/docs/faq/kubed.md +++ b/content/en/docs/faq/kubed.md @@ -33,9 +33,7 @@ spec: ## Syncing arbitrary secrets across namespaces using kubed -In order for the target Secret to be synced, the Secret resource must first be -created with the correct annotations before the creation of the Certificate, -else the Secret will need to be edited instead. The example below shows syncing +In order for the target Secret to be synced, you can use the `secretTemplate` field for annotating the generated secret with the kubed sync annotation (See [CertificateSecretTemplate]). The example below shows syncing a certificate belonging to the `sandbox` Certificate from the `cert-manager` namespace, into the `sandbox` namespace. From 6c9420e6372892f6aa8946c16ec718554db7b693 Mon Sep 17 00:00:00 2001 From: Aljoscha Poertner Date: Tue, 2 Nov 2021 20:33:24 +0100 Subject: [PATCH 4/5] docs(kubed): link to v1 because v1alpha3 is deprecated Signed-off-by: Aljoscha Poertner --- content/en/docs/faq/kubed.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/faq/kubed.md b/content/en/docs/faq/kubed.md index 3146b0d2e12..c8ecaab3301 100644 --- a/content/en/docs/faq/kubed.md +++ b/content/en/docs/faq/kubed.md @@ -62,4 +62,4 @@ spec: kubed.appscode.com/sync: "cert-manager-tls=sandbox" # Sync certificate to matching namespaces ``` -[CertificateSecretTemplate]: ../../reference/api-docs/#cert-manager.io/v1alpha3.CertificateSecretTemplate \ No newline at end of file +[CertificateSecretTemplate]: ../../reference/api-docs/#cert-manager.io/v1.CertificateSecretTemplate \ No newline at end of file From fa610855ac7f713717c318d6174f8ec41f70fb21 Mon Sep 17 00:00:00 2001 From: Aljoscha Poertner Date: Tue, 2 Nov 2021 20:53:47 +0100 Subject: [PATCH 5/5] docs(spelling): Add CertificateSecretTemplate to .spelling for exclusion Signed-off-by: Aljoscha Poertner --- .spelling | 1 + 1 file changed, 1 insertion(+) diff --git a/.spelling b/.spelling index 8d65e7cecc3..dde810240c6 100644 --- a/.spelling +++ b/.spelling @@ -34,6 +34,7 @@ boolean CAs CertificateRequest CertificateRequests +CertificateSecretTemplate CertificateSigningRequest CertificateSigningRequests Changelog