commit e6ca393a9c9230d77eb94c4855f10c95e2a4d6ac parent f15056d887bec407dc2ef9b58b5c54b8b2b36f51 Author: MTRNord <mtrnord1@gmail.com> Date: Sat, 27 Apr 2024 23:58:21 +0200 Deploy cert-manager Diffstat:
| A | infrastructure/controllers/cert-manager.yaml | | | 55 | +++++++++++++++++++++++++++++++++++++++++++++++++++++++ |
| M | infrastructure/controllers/kustomization.yaml | | | 1 | + |
2 files changed, 56 insertions(+), 0 deletions(-)
diff --git a/infrastructure/controllers/cert-manager.yaml b/infrastructure/controllers/cert-manager.yaml @@ -0,0 +1,55 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: cert-manager +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: cert-manager + namespace: cert-manager +spec: + interval: 24h + url: https://charts.jetstack.io +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta2 +kind: HelmRelease +metadata: + name: cert-manager + namespace: cert-manager +spec: + interval: 30m + chart: + spec: + chart: cert-manager + version: "1.x" + sourceRef: + kind: HelmRepository + name: cert-manager + namespace: cert-manager + interval: 12h + values: + extraArgs: + - "--feature-gates=ExperimentalGatewayAPISupport=true" + installCRDs: true + enableCertificateOwnerRef: false + prometheus: + servicemonitor: + enabled: true +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: allow-certmanager-ingress + namespace: flux-system +spec: + podSelector: + matchLabels: + acme.cert-manager.io/http01-solver: "true" + ingress: + - ports: + - protocol: TCP + port: 8089 + policyTypes: + - Ingress diff --git a/infrastructure/controllers/kustomization.yaml b/infrastructure/controllers/kustomization.yaml @@ -3,4 +3,5 @@ kind: Kustomization resources: - image-updater.yaml - descheduler.yaml + - cert-manager.yaml #- capacitor.yaml