cert

deployment/deploy-yml.tmpl

@@ -1,3 +1,28 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: exim-forwarder-cert
+spec:
+  secretName: exim-forwarder-cert
+  duration: 2160h
+  renewBefore: 360h
+  subject:
+    organizations:
+      - hottis-de
+  isCA: false
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+  usages:
+    - server auth
+  dnsNames:
+    - mx.mainscnt.eu
+  issuerRef:
+    name: letsencrypt-staging-http
+    kind: ClusterIssuer
+    group: cert-manager.io
+---
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -35,6 +60,9 @@ spec:
             - name: exim-config
               mountPath: /etc/exim/db
               readOnly: true
+            - name: tls-cert
+              mountPath: /etc/exim/db
+              readOnly: true
       volumes:
         - name: exim-config
           configMap:
@@ -44,6 +72,14 @@ spec:
                 path: forward_domains
               - key: addresses
                 path: forward_addresses
+        - name: tls-cert
+          secret:
+            secretName: exim-forwarder-cert
+            items:
+              - key: tls.crt
+                path: server.crt
+              - key: tls.key
+                path: server.key
 ---
 apiVersion: v1
 kind: Service