venafi - certmangager

gistfile1.txt

kubectl create secret generic cloud-secret \
  --namespace='sock-shop' \
  --from-literal=apikey='xxxxx-xxxxx-xxxxx-xxxxx-xxxxx'
----
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: cloud-venafi-issuer
  namespace: sock-shop 
spec:
  venafi:
    zone: "cert-manager\\OpenShift"
    cloud:
      apiTokenSecretRef:
        name: cloud-secret
        key: apikey
----
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: sock-shop-certificate
  namespace: sock-shop
spec:
  secretName: sock-shop-certificate 
  commonName: sock-shop.apps.cluster-pwmx8.pwmx8.sandbox1656.opentlc.com 
  dnsNames:
  - sock-shop.apps.cluster-pwmx8.pwmx8.sandbox1656.opentlc.com
  issuerRef:
    name: cloud-venafi-issuer
----