my-certs.yaml

---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
  name: linkerd-selfsigning-issuer
  namespace: linkerd
  labels:
    linkerd.io/control-plane-component: identity
    linkerd.io/control-plane-ns: linkerd
spec:
  selfSigned: {}
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: linkerd-ca
  namespace: linkerd
  labels:
    linkerd.io/control-plane-component: identity
    linkerd.io/control-plane-ns: linkerd
spec:
  secretName: linkerd-ca-tls
  commonName: linkerd
  isCA: true
  keyAlgorithm: ecdsa
  issuerRef:
    name: linkerd-selfsigning-issuer
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
  name: linkerd-ca-issuer
  namespace: linkerd
  labels:
    linkerd.io/control-plane-component: identity
    linkerd.io/control-plane-ns: linkerd
spec:
  ca:
    secretName: linkerd-ca-tls
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: linkerd
  namespace: linkerd
  labels:
    linkerd.io/control-plane-component: identity
    linkerd.io/control-plane-ns: linkerd
spec:
  secretName: linkerd-identity-cert
  commonName: linkerd
  keyAlgorithm: ecdsa
  issuerRef:
    name: linkerd-ca-issuer
  dnsNames:
  - identity.linkerd.cluster.local