Move cert-manager, add clusterissuer

apps/templates/cert-manager.yaml

@@ -3,23 +3,18 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
 spec:
-  destination:
-    namespace: cert-manager
-    server: {{ .Values.spec.destination.server }}
   project: default
   source:
-    path: ''
-    repoURL: https://charts.jetstack.io
-    targetRevision: v1.15.3
-    chart: cert-manager
-    helm:
-      parameters:
-        - name: crds.enabled
-          value: 'true'
+    repoURL: https://github.com/rubenhensen/k8scd.git
+    targetRevision: HEAD
+    path: cert-manager
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cert-manager
   syncPolicy:
     syncOptions:
     - CreateNamespace=true
-    automated: {}
+    automated:
+      prune: true
+      selfHeal: true

cert-manager/helm-cert-manager.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: cert-manager
+    server: {{ .Values.spec.destination.server }}
+  project: default
+  source:
+    path: ''
+    repoURL: https://charts.jetstack.io
+    targetRevision: v1.15.3
+    chart: cert-manager
+    helm:
+      parameters:
+        - name: crds.enabled
+          value: 'true'
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    automated: {}

cert-manager/prod-clusterIssuer.yaml

@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: prod-clusterIssuer
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: ruben.hensen@proton.me
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx