From c5673a1565f97ce08bda1c294ce08f04b90fb5b3 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Fri, 6 Sep 2024 00:59:12 +0200
Subject: [PATCH] Move cert-manager, add clusterissuer

---
 apps/templates/cert-manager.yaml     | 23 +++++++++--------------
 cert-manager/helm-cert-manager.yaml  | 25 +++++++++++++++++++++++++
 cert-manager/prod-clusterIssuer.yaml | 18 ++++++++++++++++++
 3 files changed, 52 insertions(+), 14 deletions(-)
 create mode 100644 cert-manager/helm-cert-manager.yaml
 create mode 100644 cert-manager/prod-clusterIssuer.yaml

diff --git a/apps/templates/cert-manager.yaml b/apps/templates/cert-manager.yaml
index 9eda648..3da232f 100644
--- a/apps/templates/cert-manager.yaml
+++ b/apps/templates/cert-manager.yaml
@@ -3,23 +3,18 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
 spec:
-  destination:
-    namespace: cert-manager
-    server: {{ .Values.spec.destination.server }}
   project: default
   source:
-    path: ''
-    repoURL: https://charts.jetstack.io
-    targetRevision: v1.15.3
-    chart: cert-manager
-    helm:
-      parameters:
-        - name: crds.enabled
-          value: 'true'
+    repoURL: https://github.com/rubenhensen/k8scd.git
+    targetRevision: HEAD
+    path: cert-manager
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cert-manager
   syncPolicy:
     syncOptions:
     - CreateNamespace=true
-    automated: {}
\ No newline at end of file
+    automated:
+      prune: true
+      selfHeal: true
\ No newline at end of file
diff --git a/cert-manager/helm-cert-manager.yaml b/cert-manager/helm-cert-manager.yaml
new file mode 100644
index 0000000..9eda648
--- /dev/null
+++ b/cert-manager/helm-cert-manager.yaml
@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: cert-manager
+    server: {{ .Values.spec.destination.server }}
+  project: default
+  source:
+    path: ''
+    repoURL: https://charts.jetstack.io
+    targetRevision: v1.15.3
+    chart: cert-manager
+    helm:
+      parameters:
+        - name: crds.enabled
+          value: 'true'
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    automated: {}
\ No newline at end of file
diff --git a/cert-manager/prod-clusterIssuer.yaml b/cert-manager/prod-clusterIssuer.yaml
new file mode 100644
index 0000000..fe45876
--- /dev/null
+++ b/cert-manager/prod-clusterIssuer.yaml
@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: prod-clusterIssuer
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: ruben.hensen@proton.me
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx
\ No newline at end of file