cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

cert-manager.yaml (3158B)

      1 apiVersion: v1
      2 kind: Namespace
      3 metadata:
      4   name: cert-manager
      5 ---
      6 apiVersion: source.toolkit.fluxcd.io/v1
      7 kind: HelmRepository
      8 metadata:
      9   name: cert-manager
     10   namespace: cert-manager
     11 spec:
     12   interval: 24h
     13   url: https://charts.jetstack.io
     14 ---
     15 apiVersion: source.toolkit.fluxcd.io/v1
     16 kind: HelmRepository
     17 metadata:
     18   name: cert-manager-pdns
     19   namespace: cert-manager
     20 spec:
     21   interval: 24h
     22   url: https://zachomedia.github.io/cert-manager-webhook-pdns
     23 ---
     24 apiVersion: image.toolkit.fluxcd.io/v1
     25 kind: ImageRepository
     26 metadata:
     27   name: cert-manager
     28   namespace: cert-manager
     29 spec:
     30   image: quay.io/jetstack/cert-manager-controller
     31   interval: 5h
     32 ---
     33 apiVersion: image.toolkit.fluxcd.io/v1
     34 kind: ImagePolicy
     35 metadata:
     36   name: cert-manager
     37   namespace: cert-manager
     38 spec:
     39   imageRepositoryRef:
     40     name: cert-manager
     41   policy:
     42     semver:
     43       range: ">=v1.19.0 <v2.0.0"
     44 ---
     45 apiVersion: image.toolkit.fluxcd.io/v1
     46 kind: ImageUpdateAutomation
     47 metadata:
     48   name: cert-manager
     49   namespace: cert-manager
     50 spec:
     51   interval: 30m
     52   sourceRef:
     53     kind: GitRepository
     54     name: flux-system
     55     namespace: flux-system
     56   git:
     57     commit:
     58       author:
     59         email: fluxcdbot@users.noreply.github.com
     60         name: fluxcdbot
     61     push:
     62       branch: main
     63   update:
     64     path: ./
     65 ---
     66 apiVersion: helm.toolkit.fluxcd.io/v2
     67 kind: HelmRelease
     68 metadata:
     69   name: cert-manager
     70   namespace: cert-manager
     71 spec:
     72   interval: 30m
     73   chart:
     74     spec:
     75       chart: cert-manager
     76       version: "1.x"
     77       sourceRef:
     78         kind: HelmRepository
     79         name: cert-manager
     80         namespace: cert-manager
     81       interval: 12h
     82   values:
     83     global:
     84       priorityClassName: system-cluster-critical
     85     replicaCount: 2
     86     podDisruptionBudget:
     87       enabled: true
     88       minAvailable: 1
     89     installCRDs: true
     90     enableCertificateOwnerRef: false
     91     prometheus:
     92       enabled: true
     93       podmonitor:
     94         enabled: false
     95     image:
     96       tag: v1.19.2
     97     webhook:
     98       image:
     99         tag: v1.19.2
    100     cainjector:
    101       image:
    102         tag: v1.19.2
    103     acmesolver:
    104       image:
    105         tag: v1.19.2
    106     startupapicheck:
    107       image:
    108         tag: v1.19.2
    109     config:
    110       apiVersion: controller.config.cert-manager.io/v1alpha1
    111       kind: ControllerConfiguration
    112       enableGatewayAPI: true
    113       featureGates:
    114         AdditionalCertificateOutputFormats: true
    115         ExperimentalGatewayAPISupport: true
    116 ---
    117 apiVersion: networking.k8s.io/v1
    118 kind: NetworkPolicy
    119 metadata:
    120   name: allow-certmanager-ingress
    121   namespace: flux-system
    122 spec:
    123   podSelector:
    124     matchLabels:
    125       acme.cert-manager.io/http01-solver: "true"
    126   ingress:
    127     - ports:
    128         - protocol: TCP
    129           port: 8089
    130   policyTypes:
    131     - Ingress
    132 ---
    133 apiVersion: helm.toolkit.fluxcd.io/v2
    134 kind: HelmRelease
    135 metadata:
    136   name: cert-manager-pdns
    137   namespace: cert-manager
    138 spec:
    139   interval: 30m
    140   chart:
    141     spec:
    142       chart: cert-manager-webhook-pdns
    143       version: "3.x"
    144       sourceRef:
    145         kind: HelmRepository
    146         name: cert-manager-pdns
    147         namespace: cert-manager
    148       interval: 12h
    149   values:
    150     image:
    151       repository: ghcr.io/mtrnord/cert-manager-webhook-pdns
    152       pullPolicy: Always
    153       tag: latest