CI: Configure cert-manager to provide wildcard SSL for EKS cluster FQDN
Summary
In #1688 (closed), we configured jetstack/cert-manager
to provide a wildcard SSL certificate for the GKE cluster's FQDN.
We should do the same for the EKS cluster's sub-domain.
Current state
We've placed a traditional wildcard SSL certificate into the EKS cluster, which expires Wednesday, April 1, 2020 at 7:59:59 PM
Work
-
install jetstack/cert-manager
chart tocert-manager
namespace -
configured an Issuer
within the CI namespace, using the appropriate credentials for DNS-01 validation capability -
create a Certificate
resource to request a wildcard SSL certificate be placed into an appropriately named secret
@mendeni @twk3 - Placing this in %12.9 as as it aligns with the hard due date I've set of 2020-03-30