Skip to content

Commit 4f7de9b

Browse files
author
Kasturi Narra
committed
Add HTTP01 ACME test for cert-manager
1 parent ba1f75b commit 4f7de9b

File tree

2 files changed

+392
-78
lines changed

2 files changed

+392
-78
lines changed
Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
# xref: https://github.com/letsencrypt/pebble/tree/main/test/config
2+
# xref: https://github.com/cert-manager/cert-manager/blob/master/make/config/pebble
3+
apiVersion: v1
4+
kind: ConfigMap
5+
metadata:
6+
name: pebble
7+
data:
8+
pebble-config.json: |
9+
{
10+
"pebble": {
11+
"listenAddress": "0.0.0.0:14000",
12+
"managementListenAddress": "0.0.0.0:15000",
13+
"certificate": "test/certs/localhost/cert.pem",
14+
"privateKey": "test/certs/localhost/key.pem",
15+
"httpPort": 80,
16+
"tlsPort": 443,
17+
"ocspResponderURL": "",
18+
"externalAccountBindingRequired": false
19+
}
20+
}
21+
---
22+
apiVersion: apps/v1
23+
kind: Deployment
24+
metadata:
25+
name: pebble
26+
spec:
27+
selector:
28+
matchLabels:
29+
app.kubernetes.io/name: pebble
30+
replicas: 1
31+
template:
32+
metadata:
33+
labels:
34+
app.kubernetes.io/name: pebble
35+
spec:
36+
volumes:
37+
- name: config-volume
38+
configMap:
39+
name: pebble
40+
items:
41+
- key: pebble-config.json
42+
path: pebble-config.json
43+
containers:
44+
- image: quay.io/openshifttest/letsencrypt-pebble:2.7.0
45+
imagePullPolicy: IfNotPresent
46+
name: pebble
47+
ports:
48+
- name: http
49+
containerPort: 14000
50+
protocol: TCP
51+
volumeMounts:
52+
- name: config-volume
53+
mountPath: /test/config/pebble-config.json
54+
subPath: pebble-config.json
55+
readOnly: true
56+
securityContext:
57+
allowPrivilegeEscalation: false
58+
capabilities:
59+
drop: ["ALL"]
60+
runAsNonRoot: true
61+
seccompProfile:
62+
type: RuntimeDefault
63+
---
64+
apiVersion: v1
65+
kind: Service
66+
metadata:
67+
name: pebble
68+
spec:
69+
type: ClusterIP
70+
ports:
71+
- port: 14000
72+
targetPort: http
73+
protocol: TCP
74+
name: http
75+
selector:
76+
app.kubernetes.io/name: pebble

0 commit comments

Comments
 (0)