♻️ cert-manager

cluster/core/cert-manager/helm-release.yaml

@@ -5,10 +5,9 @@ metadata:
   name: cert-manager
   namespace: cert-manager
 spec:
-  interval: 5m
+  interval: 15m
   chart:
     spec:
-      # renovate: registryUrl=https://charts.jetstack.io/
       chart: cert-manager
       version: v1.9.1
       sourceRef:

cluster/core/cert-manager/kustomization.yaml

@@ -3,10 +3,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace.yaml
+  - secret.sops.yaml
   - helm-release.yaml
-  - cert-manager-webhook-ovh.yaml
-  - cert-manager-webhook-ovh-helm-release.yaml
+  - webhook-ovh
   - letsencrypt-production.yaml
   - letsencrypt-staging.yaml
   - prometheus-rule.yaml
-  - secret.sops.yaml

cluster/core/cert-manager/letsencrypt-production.yaml

@@ -2,13 +2,13 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: letsencrypt-staging
+  name: letsencrypt-production
 spec:
   acme:
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    server: https://acme-v02.api.letsencrypt.org/directory
     email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
     privateKeySecretRef:
-      name: letsencrypt-staging
+      name: letsencrypt-production
     solvers:
       - dns01:
           webhook:

cluster/core/cert-manager/letsencrypt-staging.yaml

@@ -2,13 +2,13 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: letsencrypt-production
+  name: letsencrypt-staging
 spec:
   acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
     email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
     privateKeySecretRef:
-      name: letsencrypt-production
+      name: letsencrypt-staging
     solvers:
       - dns01:
           webhook:

cluster/core/cert-manager/namespace.yaml

@@ -3,3 +3,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: cert-manager
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    goldilocks.fairwinds.com/enabled: "true"

cluster/core/cert-manager/webhook-ovh/helm-release.yaml

@@ -5,10 +5,9 @@ metadata:
   name: cert-manager-webhook-ovh
   namespace: cert-manager
 spec:
-  interval: 5m
+  interval: 15m
   chart:
     spec:
-      # renovate: registryUrl=https://github.com/baarde/cert-manager-webhook-ovh
       chart: ./deploy/cert-manager-webhook-ovh
       version: 0.3.0
       sourceRef:

cluster/core/cert-manager/webhook-ovh/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - rbac.yaml
+  - helm-release.yaml