mirror of
https://github.com/zoriya/snow.git
synced 2026-08-13 01:29:18 +00:00
87 lines
2.5 KiB
YAML
87 lines
2.5 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: cert-manager
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: cert-manager
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
source:
|
|
repoURL: https://charts.jetstack.io
|
|
chart: cert-manager
|
|
targetRevision: v1.21.1
|
|
helm:
|
|
valuesObject:
|
|
crds:
|
|
enabled: true
|
|
extraObjects:
|
|
- |
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt
|
|
spec:
|
|
acme:
|
|
email: zoe.roux@zoriya.dev
|
|
profile: tlsserver
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
privateKeySecretRef:
|
|
name: lets-encrypt-pk
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
ingressClassName: cilium
|
|
- |
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: selfsigned
|
|
spec:
|
|
selfSigned: {}
|
|
- |
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-dns
|
|
spec:
|
|
acme:
|
|
email: zoe.roux@zoriya.dev
|
|
profile: tlsserver
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
privateKeySecretRef:
|
|
name: lets-encrypt-dns-pk
|
|
solvers:
|
|
- selector:
|
|
dnsZones:
|
|
- sdg.moe
|
|
dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: api-token
|
|
- |
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: cloudflare-api-token
|
|
namespace: cert-manager
|
|
spec:
|
|
refreshInterval: 24h
|
|
secretStoreRef:
|
|
name: bitwarden
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: cloudflare-api-token
|
|
data:
|
|
- secretKey: api-token
|
|
remoteRef:
|
|
key: cloudflare-api-token
|