@@ -290,7 +290,7 @@ kind: ClusterTrustBundle
290290metadata :
291291 name : example.com:server-tls:foo
292292 labels :
293- kubernetes.io /cluster-trust-bundle-version : live
293+ example.com /cluster-trust-bundle-version : live
294294spec :
295295 signerName : example.com/server-tls
296296 trustBundle : " <... PEM DATA ...>"
@@ -321,7 +321,7 @@ spec:
321321+ - clusterTrustBundle:
322322+ signerName: example.com/server-tls
323323+ labelSelector:
324- + kubernetes.io /cluster-trust-bundle-version: live
324+ + example.com /cluster-trust-bundle-version: live
325325+ path: ca_certificates.pem
326326` ` `
327327
@@ -562,11 +562,11 @@ Human operators or controllers may use unique names and labels to maintain diffe
562562
563563For example, if I maintain ` example.com/my-signer ` , I can use the following strategy:
564564* I maintain one ClusterTrustBundle named ` example.com:my-signer:live ` , labeled
565- ` kubernetes.io /cluster-trust-bundle-version=live` (the object name is mostly
565+ ` example.com /cluster-trust-bundle-version=live` (the object name is mostly
566566 irrelevant).
567567* I maintain an additional ClusterTrustBundle named
568568 ` example.com:my-signer:canary ` , labeled
569- ` kubernetes.io /cluster-trust-bundle-version=canary` .
569+ ` example.com /cluster-trust-bundle-version=canary` .
570570* I have coordinated some fraction of my workloads to use the canary label
571571 selector, while the bulk of them use the live label selector
572572* When I want to perform a root rotation or other trust change, I edit the
0 commit comments