Skip to content

Commit

Permalink
Merge pull request kubernetes-sigs#149 from alandtsang/cronjob-tutori…
Browse files Browse the repository at this point in the history
…al/cert-manager

翻译 1.9.1 Deploying the cert manager
  • Loading branch information
mergify[bot] committed Jul 31, 2020
2 parents 7122c81 + 04cd1d3 commit e97e8af
Showing 1 changed file with 7 additions and 16 deletions.
23 changes: 7 additions & 16 deletions docs/book/src/cronjob-tutorial/cert-manager.md
Original file line number Diff line number Diff line change
@@ -1,24 +1,15 @@
# Deploying the cert manager
# 部署 cert manager

We suggest using [cert manager](https://github.com/jetstack/cert-manager) for
provisioning the certificates for the webhook server. Other solutions should
also work as long as they put the certificates in the desired location.
我们建议使用 [cert manager](https://github.com/jetstack/cert-manager) 为 webhook 服务器提供证书。只要其他解决方案将证书放在期望的位置,也将会起作用。

You can follow
[the cert manager documentation](https://docs.cert-manager.io/en/latest/getting-started/install/kubernetes.html)
to install it.
你可以按照 [cert manager 文档](https://docs.cert-manager.io/en/latest/getting-started/install/kubernetes.html) 进行安装。

Cert manager also has a component called CA injector, which is responsible for
injecting the CA bundle into the Mutating|ValidatingWebhookConfiguration.
Cert manager 还有一个叫做 CA 注入器的组件,该组件负责将 CA 捆绑注入到 Mutating|ValidatingWebhookConfiguration 中。

To accomplish that, you need to use an annotation with key
`cert-manager.io/inject-ca-from`
in the Mutating|ValidatingWebhookConfiguration objects.
The value of the annotation should point to an existing certificate CR instance
in the format of `<certificate-namespace>/<certificate-name>`.
为此,你需要在 Mutating|ValidatingWebhookConfiguration 对象中使用带有 key 为 `cert-manager.io/inject-ca-from` 的注释。
注释的值应指向现有的证书 CR 实例,格式为 `<certificate-namespace>/<certificate-name>`

This is the [kustomize](https://github.com/kubernetes-sigs/kustomize) patch we
used for annotating the Mutating|ValidatingWebhookConfiguration objects.
这是我们用于注释 Mutating|ValidatingWebhookConfiguration 对象的 [kustomize](https://github.com/kubernetes-sigs/kustomize) patch。
```yaml
{{#include ./testdata/project/config/default/webhookcainjection_patch.yaml}}
```

0 comments on commit e97e8af

Please sign in to comment.