Add cert issuer

apps/argocd.yaml

@@ -28,4 +28,6 @@ spec:
             annotations:
               ingress.cilium.io/tls-passthrough: "true"
               ingress.cilium.io/force-https: "true"
+              cert-manager.io/cluster-issuer: letsencrypt
+            hostname: argocd.sdg.moe
             tls: true

apps/misc.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: misc
+  namespace: argocd
+spec:
+  project: default
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: false
+    syncOptions:
+      - CreateNamespace=true
+  source:
+    repoURL: https://github.com/zoriya/snow
+    targetRevision: HEAD
+    path: apps/misc

apps/misc/cluster-issuer.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: zoe.roux@zoriya.dev
+    profile: tlsserver
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: lets-encrypt-pk
+    solvers:
+    - http01:
+        ingress:
+          ingressClassName: cilium

apps/misc/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - cluster-issuer.yaml