Skip to content

Commit de0166b

Browse files
authored
Merge pull request #1244 from ctrought/subject-annotations-docs
document new subject ingress/gateway annotations
2 parents 9e701ea + a09d1b2 commit de0166b

File tree

2 files changed

+73
-1
lines changed

2 files changed

+73
-1
lines changed

content/docs/usage/gateway.md

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -369,6 +369,42 @@ Certificate resources:
369369
- `cert-manager.io/common-name`: (optional) this annotation allows you to
370370
configure `spec.commonName` for the Certificate to be generated.
371371

372+
- `cert-manager.io/email-sans`: (optional) this annotation allows you to
373+
configure `spec.emailAddresses` field for the Certificate to be generated.
374+
Supports comma-separated values e.g. "[email protected],[email protected]"
375+
376+
- `cert-manager.io/subject-organizations`: (optional) this annotation allows you to
377+
configure `spec.subject.organizations` field for the Certificate to be generated.
378+
Supports comma-separated values e.g. "Company 1,Company 2"
379+
380+
- `cert-manager.io/subject-organizationalunits`: (optional) this annotation allows you to
381+
configure `spec.subject.organizationalUnits` field for the Certificate to be generated.
382+
Supports comma-separated values e.g. "IT Services,Cloud Services"
383+
384+
- `cert-manager.io/subject-countries`: (optional) this annotation allows you to
385+
configure `spec.subject.countries` field for the Certificate to be generated.
386+
Supports comma-separated values e.g. "Country 1,Country 2"
387+
388+
- `cert-manager.io/subject-provinces`: (optional) this annotation allows you to
389+
configure `spec.subject.provinces` field for the Certificate to be generated.
390+
Supports comma-separated values e.g. "Province 1,Province 2"
391+
392+
- `cert-manager.io/subject-localities`: (optional) this annotation allows you to
393+
configure `spec.subject.localities` field for the Certificate to be generated.
394+
Supports comma-separated values e.g. "City 1,City 2"
395+
396+
- `cert-manager.io/subject-postalcodes`: (optional) this annotation allows you to
397+
configure `spec.subject.postalCodes` field for the Certificate to be generated.
398+
Supports comma-separated values e.g. "123ABC,456DEF"
399+
400+
- `cert-manager.io/subject-streetaddresses`: (optional) this annotation allows you to
401+
configure `spec.subject.streetAddresses` field for the Certificate to be generated.
402+
Supports comma-separated values e.g. "123 Example St,456 Other Blvd"
403+
404+
- `cert-manager.io/subject-serialnumber`: (optional) this annotation allows you to
405+
configure `spec.subject.serialNumber` field for the Certificate to be generated.
406+
Supports comma-separated values e.g. "10978342379280287615,1111144445555522228888"
407+
372408
- ` cert-manager.io/duration`: (optional) this annotation allows you to
373409
configure `spec.duration` field for the Certificate to be generated.
374410

content/docs/usage/ingress.md

Lines changed: 37 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,6 +102,42 @@ trigger Certificate resources to be automatically created:
102102
- `cert-manager.io/common-name`: (optional) this annotation allows you to
103103
configure `spec.commonName` for the Certificate to be generated.
104104

105+
- `cert-manager.io/email-sans`: (optional) this annotation allows you to
106+
configure `spec.emailAddresses` field for the Certificate to be generated.
107+
Supports comma-separated values e.g. "[email protected],[email protected]"
108+
109+
- `cert-manager.io/subject-organizations`: (optional) this annotation allows you to
110+
configure `spec.subject.organizations` field for the Certificate to be generated.
111+
Supports comma-separated values e.g. "Company 1,Company 2"
112+
113+
- `cert-manager.io/subject-organizationalunits`: (optional) this annotation allows you to
114+
configure `spec.subject.organizationalUnits` field for the Certificate to be generated.
115+
Supports comma-separated values e.g. "IT Services,Cloud Services"
116+
117+
- `cert-manager.io/subject-countries`: (optional) this annotation allows you to
118+
configure `spec.subject.countries` field for the Certificate to be generated.
119+
Supports comma-separated values e.g. "Country 1,Country 2"
120+
121+
- `cert-manager.io/subject-provinces`: (optional) this annotation allows you to
122+
configure `spec.subject.provinces` field for the Certificate to be generated.
123+
Supports comma-separated values e.g. "Province 1,Province 2"
124+
125+
- `cert-manager.io/subject-localities`: (optional) this annotation allows you to
126+
configure `spec.subject.localities` field for the Certificate to be generated.
127+
Supports comma-separated values e.g. "City 1,City 2"
128+
129+
- `cert-manager.io/subject-postalcodes`: (optional) this annotation allows you to
130+
configure `spec.subject.postalCodes` field for the Certificate to be generated.
131+
Supports comma-separated values e.g. "123ABC,456DEF"
132+
133+
- `cert-manager.io/subject-streetaddresses`: (optional) this annotation allows you to
134+
configure `spec.subject.streetAddresses` field for the Certificate to be generated.
135+
Supports comma-separated values e.g. "123 Example St,456 Other Blvd"
136+
137+
- `cert-manager.io/subject-serialnumber`: (optional) this annotation allows you to
138+
configure `spec.subject.serialNumber` field for the Certificate to be generated.
139+
Supports comma-separated values e.g. "10978342379280287615,1111144445555522228888"
140+
105141
- ` cert-manager.io/duration`: (optional) this annotation allows you to
106142
configure `spec.duration` field for the Certificate to be generated.
107143

@@ -172,4 +208,4 @@ guide](../installation/README.md).
172208
173209
## Troubleshooting
174210
175-
If you do not see a `Certificate` resource being created after applying the ingress-shim annotations check that at least `cert-manager.io/issuer` or `cert-manager.io/cluster-issuer` is set. If you want to use `kubernetes.io/tls-acme: "true"` make sure to have checked all steps above and you might want to look for errors in the cert-manager pod logs if not resolved.
211+
If you do not see a `Certificate` resource being created after applying the ingress-shim annotations check that at least `cert-manager.io/issuer` or `cert-manager.io/cluster-issuer` is set. If you want to use `kubernetes.io/tls-acme: "true"` make sure to have checked all steps above and you might want to look for errors in the cert-manager pod logs if not resolved.

0 commit comments

Comments
 (0)