mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
62 lines
1.6 KiB
YAML
62 lines
1.6 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: helm-cert-manager
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
destination:
|
|
namespace: cert-manager
|
|
server: https://kubernetes.default.svc
|
|
project: default
|
|
source:
|
|
repoURL: https://charts.jetstack.io
|
|
targetRevision: v1.21.3
|
|
chart: cert-manager
|
|
helm:
|
|
parameters:
|
|
- name: crds.enabled
|
|
value: 'true'
|
|
# The controller talks ACME to Let's Encrypt. Give it a trust store
|
|
# without the compromised eMudhra intermediates, see ca-bundle/.
|
|
values: |
|
|
# Lets cert-manager solve HTTP-01 challenges with an HTTPRoute on
|
|
# the Gateway, see cert-manager/prod-cluster-issuer.yaml.
|
|
config:
|
|
gatewayAPI:
|
|
enabled: true
|
|
volumes:
|
|
- name: patched-ca-bundle
|
|
configMap:
|
|
name: patched-ca-bundle
|
|
volumeMounts:
|
|
- name: patched-ca-bundle
|
|
mountPath: /etc/ssl/certs
|
|
readOnly: true
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 48Mi
|
|
limits:
|
|
memory: 128Mi
|
|
cainjector:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 80Mi
|
|
limits:
|
|
memory: 256Mi
|
|
webhook:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
limits:
|
|
memory: 128Mi
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
automated:
|
|
selfHeal: true
|