fix self-sign

kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml

@@ -1,3 +1,10 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: selfsigned-issuer
+spec:
+
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/cert-manager.io/certificate_v1.json
 apiVersion: cert-manager.io/v1
@@ -9,7 +16,7 @@ spec:
   commonName: *name
   subject:
     organizations:
-      - ${SECRET_DOMAIN}
+      - ${SECRET_INTERNAL_DOMAIN}
   secretName: root-secret
   privateKey:
     algorithm: ECDSA
@@ -28,7 +35,7 @@ spec:
   commonName: *name
   subject:
     organizations:
-      - ${SECRET_DOMAIN}
+      - ${SECRET_INTERNAL_DOMAIN}
   secretName: strong-root-secret
   privateKey:
     algorithm: ECDSA

kubernetes/apps/external-secrets/ks.yaml

@@ -18,25 +18,25 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 5m
----
+# ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1
+# apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
+# kind: Kustomization
-metadata:
+# metadata:
-  name: &app external-secrets-bw
+#   name: &app external-secrets-bw
-  namespace: flux-system
+#   namespace: flux-system
-spec:
+# spec:
-  targetNamespace: external-secrets
+#   targetNamespace: external-secrets
-  commonMetadata:
+#   commonMetadata:
-    labels:
+#     labels:
-      app.kubernetes.io/name: *app
+#       app.kubernetes.io/name: *app
-  dependsOn:
+#   dependsOn:
-    - name: external-secrets
+#     - name: external-secrets
-  path: ./kubernetes/apps/external-secrets/bitwarden
+#   path: ./kubernetes/apps/external-secrets/bitwarden
-  prune: true
+#   prune: true
-  sourceRef:
+#   sourceRef:
-    kind: GitRepository
+#     kind: GitRepository
-    name: home-kubernetes
+#     name: home-kubernetes
-  wait: true
+#   wait: true
-  interval: 30m
+#   interval: 30m
-  retryInterval: 1m
+#   retryInterval: 1m
-  timeout: 5m
+#   timeout: 5m