1
1
---
2
2
title : Google Cloud DNS
3
3
description :
4
- Learn how to use cert-manager to set up SSL certificates using Google Cloud
4
+ Learn how to use cert-manager to set up SSL certificates using Google Cloud
5
5
DNS for DNS01 challenges.
6
6
---
7
7
@@ -21,8 +21,10 @@ configure your Coder hostname and dev URLs.
21
21
22
22
You must have:
23
23
24
- - A Kubernetes cluster [ of a supported version] ( https://kubernetes.io/releases/version-skew-policy/#supported-version-skew ) with internet connectivity
25
- - [ kubectl] ( https://kubernetes.io/docs/tasks/tools/install-kubectl/ )
24
+ - A Kubernetes cluster
25
+ [ of a supported version] ( ../../setup/kubernetes/index.md#supported-kubernetes-versions )
26
+ with internet connectivity
27
+ - Installed [ kubectl] ( https://kubernetes.io/docs/tasks/tools/install-kubectl/ )
26
28
- A [ Cloud DNS] ( https://cloud.google.com/dns ) account
27
29
- A
28
30
[ GCP Service Account] ( https://cloud.google.com/iam/docs/creating-managing-service-accounts )
@@ -33,10 +35,11 @@ You must have:
33
35
To add cert-manager to your cluster, run:
34
36
35
37
``` console
36
- $ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.4.0/cert-manager.yaml
38
+ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.4.0/cert-manager.yaml
37
39
```
38
40
39
- More specifics can be found in the [ cert-manager install documentation] ( https://cert-manager.io/docs/installation/kubernetes/#installing-with-regular-manifests ) .
41
+ More specifics can be found in the
42
+ [ cert-manager install documentation] ( https://cert-manager.io/docs/installation/kubernetes/#installing-with-regular-manifests ) .
40
43
41
44
Once you've started the installation process, verify that all the pods are
42
45
running:
@@ -88,42 +91,41 @@ secret/clouddns-dns01-solver-svc-acct created
88
91
called ` letsencrypt.yaml ` (you can name it whatever you'd like) that includes
89
92
your newly created private key:
90
93
91
- ``` yaml
92
- apiVersion : cert-manager.io/v1
93
- kind : ClusterIssuer
94
- metadata :
95
- name : letsencrypt
96
- spec :
97
- acme :
98
- privateKeySecretRef :
99
- name : gclouddnsissuersecret
100
- server : https://acme-v02.api.letsencrypt.org/directory
101
- solvers :
102
- - dns01 :
103
- clouddns :
104
- # The ID of the GCP project
105
- project : <project-id>
106
- # This is the secret used to access the service account
107
- serviceAccountSecretRef :
108
- name : clouddns-dns01-solver-svc-acct
109
- key : key.json
110
- ` ` `
111
-
112
- More information on the values in the yaml file above can be found in [the dns01
113
- solver configuration documentation](https://cert-manager.io/docs/configuration/acme/dns01/)
94
+ ``` yaml
95
+ apiVersion : cert-manager.io/v1
96
+ kind : ClusterIssuer
97
+ metadata :
98
+ name : letsencrypt
99
+ spec :
100
+ acme :
101
+ privateKeySecretRef :
102
+ name : gclouddnsissuersecret
103
+ server : https://acme-v02.api.letsencrypt.org/directory
104
+ solvers :
105
+ - dns01 :
106
+ clouddns :
107
+ # The ID of the GCP project
108
+ project : <project-id>
109
+ # This is the secret used to access the service account
110
+ serviceAccountSecretRef :
111
+ name : clouddns-dns01-solver-svc-acct
112
+ key : key.json
113
+ ` ` `
114
114
115
+ More information on the values in the YAML file above can be found in
116
+ [the dns01 solver configuration documentation](https://cert-manager.io/docs/configuration/acme/dns01/).
115
117
116
118
1. Apply your configuration changes:
117
119
118
- ` ` ` console
119
- kubectl apply -f letsencrypt.yaml
120
- ```
120
+ ` ` ` console
121
+ kubectl apply -f letsencrypt.yaml
122
+ ```
121
123
122
- If successful, you'll see a response similar to :
124
+ If successful, you'll see a response similar to:
123
125
124
- ` ` ` console
125
- clusterissuer.cert-manager.io/letsencrypt created
126
- ` ` `
126
+ ``` console
127
+ clusterissuer.cert-manager.io/letsencrypt created
128
+ ```
127
129
128
130
## Step 5: Install Coder
129
131
@@ -144,7 +146,7 @@ helm install coder coder/coder --namespace coder \
144
146
```
145
147
146
148
The cluster-issuer will create the certificates you need, using the values
147
- provided in the `helm install` command for the dev URL and host secret.
149
+ provided in the ` helm install ` command for the dev URL and host secret.
148
150
149
151
There are additional steps to make sure that your hostname and Dev URLs work.
150
152
0 commit comments