doc: updated readme with correct steps and added an example values file as well

Author: ashish1099

argocd-helm-charts/step-ca/Readme.md

@@ -11,23 +11,28 @@ trust-manager will trust the cert when pod(client) wants to talk ingress(Traefik
 
 * Deploy step-ca app from [kubeaid/step-ca](https://github.com/Obmondo/kubeaid/tree/master/argocd-helm-charts/step-ca) which will deploy step-certificate, step-issuer, autocert (tls between services) and trust-manager
 
-* Fix values.yaml in your kubeaid-config repo
-
-(example values file)[./examples/values.yaml]
-
 * Set up stepClusterIssuer and add in the values file
   NOTE: you can only access the step certificate once the step-certificate pod is ready
 
 ```sh
 kubectl get -n step-ca -o jsonpath="{.data['root_ca\.crt']}" configmaps/step-ca-step-certificates-certs | base64 | tr -d '\n'
 
-kubectl get -n step-ca -o jsonpath="{.data['ca\.json']}" configmaps/step-ca-step-certificates-config | jq -r .authority.provisioners[0].key.kid)
+kubectl get -n step-ca -o jsonpath="{.data['ca\.json']}" configmaps/step-ca-step-certificates-config | jq -r .authority.provisioners[0].key.kid
 ```
 
+* Fix values.yaml in your kubeaid-config repo, based on the above output
+
+(example values file)[./examples/values.yaml]
+
 * Expose the root CA inside a POD.
   NOTE: you can achieve this in multiple way.
   * Mounting the secret directly
   * Passing an env
   * Inject the root ca directly via webhook (k8s)
 
   Golang can read `SSL_CERT_FILE` in which root_ca is present, so client can accept tls when its is signed by an internal CA.
+
+* Imp Notes:
+
+The job created the provisioner password automatically from the helm chart, without the provisioner
+password the step-certificate pod won't start, since its waiting for the secret

argocd-helm-charts/step-ca/examples/values.yaml

@@ -0,0 +1,10 @@
+step-certificates:
+  ca:
+    name: Kubeaid CA
+    dns: k8sdemo.kubeaid.io,step-ca-step-certificates.step-ca.svc.cluster.local,127.0.0.1
+    db:
+      storageClass: default
+
+stepClusterIssuer:
+  kid: XPbVtvFWyui3w
+  root_ca: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ3ekNDQVdtZ0F3SUJBZ0lRSnFNb2M0UTVsRkgyWEhIaVFCUE5vVEFLQmdncWhrak9QUVFEQWpCQU1Sb3cKR0FZRFZRUUtFeEZEZFdSa2JHVm1hWE5vSUVsdWRHVnliakVpTUNBR0ExVUVBeE1aUTNWa1pHeGxabWx6YUNCSgpiblJsY200Z1VtOXZkQ0JEUVRBZUZ3MHlOVEE0TWpVd09USTBNVFJhRncwek5UQTRNak13T1RJME1UUmFNRUF4CkdqQVlCZ05WQkFvVEVVTjFaR1JzWldacGMyZ2dTVzUwWlhKdU1TSXdJQVlEVlFRREV4bERkV1JrYkdWbWFYTm8KSUVsdWRHVnliaUJTYjI5MElFTkJNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUV2eGxWZTlJMwpCaFVvUmNkSElBRjVMNEUwZzF1aW5qSStWNDRoYzBzZUYzODdOd0swZU5qUThWcnlpZ1VNSUdpR2ZxWHVlRnY2CnVwWEJLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K