commit c9063de2f308d971c1b30d841726e1c6465a5538 parent ba431b6ebe76c95294a26e728bd7a17c401ca291 Author: MTRNord <MTRNord@users.noreply.github.com> Date: Sun, 3 Aug 2025 16:39:39 +0200 Add cert-manager using flux Diffstat:
| A | infrastructure_talos/controllers/cert-manager.yaml | | | 74 | ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ |
| M | infrastructure_talos/controllers/kustomization.yaml | | | 1 | + |
2 files changed, 75 insertions(+), 0 deletions(-)
diff --git a/infrastructure_talos/controllers/cert-manager.yaml b/infrastructure_talos/controllers/cert-manager.yaml @@ -0,0 +1,74 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: cert-manager +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: cert-manager + namespace: cert-manager +spec: + interval: 24h + url: https://charts.jetstack.io +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta2 +kind: HelmRelease +metadata: + name: cert-manager + namespace: cert-manager +spec: + interval: 30m + chart: + spec: + chart: cert-manager + version: "1.x" + sourceRef: + kind: HelmRepository + name: cert-manager + namespace: cert-manager + interval: 12h + values: + installCRDs: true + enableCertificateOwnerRef: false + prometheus: + enabled: true + podmonitor: + enabled: false + image: + tag: v1.16.2 + webhook: + image: + tag: v1.16.2 + cainjector: + image: + tag: v1.16.2 + acmesolver: + image: + tag: v1.16.2 + startupapicheck: + image: + tag: v1.16.2 + config: + apiVersion: controller.config.cert-manager.io/v1alpha1 + kind: ControllerConfiguration + enableGatewayAPI: true + featureGates: + AdditionalCertificateOutputFormats: true + ExperimentalGatewayAPISupport: true +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: allow-certmanager-ingress + namespace: flux-system +spec: + podSelector: + matchLabels: + acme.cert-manager.io/http01-solver: "true" + ingress: + - ports: + - protocol: TCP + port: 8089 + policyTypes: + - Ingress diff --git a/infrastructure_talos/controllers/kustomization.yaml b/infrastructure_talos/controllers/kustomization.yaml @@ -5,3 +5,4 @@ resources: - descheduler.yaml - capacitor.yaml - ./cloudnative-pg-operator + - cert-manager.yaml