70 lines
1.8 KiB
YAML
70 lines
1.8 KiB
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cert-manager-issuers
|
|
namespace: kube-system
|
|
spec:
|
|
interval: 15m
|
|
chart:
|
|
spec:
|
|
chart: raw
|
|
version: v0.3.1
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: dysnix
|
|
namespace: flux-system
|
|
install:
|
|
createNamespace: true
|
|
remediation:
|
|
retries: 5
|
|
upgrade:
|
|
remediation:
|
|
retries: 5
|
|
dependsOn:
|
|
- name: cert-manager
|
|
namespace: kube-system
|
|
values:
|
|
resources:
|
|
- apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-production
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: "${SECRET_CLOUDFLARE_EMAIL}"
|
|
privateKeySecretRef:
|
|
name: letsencrypt-production
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
email: "${SECRET_CLOUDFLARE_EMAIL}"
|
|
apiKeySecretRef:
|
|
name: cloudflare-api-key
|
|
key: api-key
|
|
selector:
|
|
dnsZones:
|
|
- ${SECRET_DOMAIN}
|
|
|
|
- apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-staging
|
|
spec:
|
|
acme:
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
email: "${SECRET_CLOUDFLARE_EMAIL}"
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
email: "${SECRET_CLOUDFLARE_EMAIL}"
|
|
apiKeySecretRef:
|
|
name: cloudflare-api-key
|
|
key: api-key
|
|
selector:
|
|
dnsZones:
|
|
- ${SECRET_DOMAIN}
|