letsencrypt renewal sketch
kubectl delete secret $OBJECTNAME kubectl delete certificate $CERTNAME_USEFQDN kubectl delete clusterissuer $NAMECLUSTERISSUER $SVC_CLUSTERIP $EMAIL --- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: $NAMECLUSTERISSUER spec: acme: # You must replace this email address with your own. # Let's Encrypt will use this to contact you about expiring # certificates, and issues related to your account. email: $EMAIL server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: # Secret resource that will be used to store the account's private key. name: $NAMECLUSTERISSUER # Add a single challenge solver, HTTP01 using nginx solvers: - http01: ingress: class: nginx --- apiVersion: cert-manager.io/v1 kind: Certifi...