✨ new talos cluster

kubernetes/cluster-0/apps/networking/cert-manager/issuers/helm-release.yaml

@@ -0,0 +1,74 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: cert-manager-issuers
+  namespace: default
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: raw
+      version: v0.3.1
+      sourceRef:
+        kind: HelmRepository
+        name: dysnix
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 5
+  upgrade:
+    remediation:
+      retries: 5
+  dependsOn:
+    - name: cert-manager
+      namespace: default
+    - name: cert-manager-webhook-ovh
+      namespace: default
+  values:
+    resources:
+      - apiVersion: cert-manager.io/v1
+        kind: ClusterIssuer
+        metadata:
+          name: letsencrypt-production
+        spec:
+          acme:
+            server: https://acme-v02.api.letsencrypt.org/directory
+            email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
+            privateKeySecretRef:
+              name: letsencrypt-production
+            solvers:
+              - dns01:
+                  webhook:
+                    groupName: "${SECRET_DOMAIN}"
+                    solverName: ovh
+                    config:
+                      endpoint: ovh-eu
+                      applicationKey: "${SECRET_CLUSTER_OVH_APPLICATION_KEY}"
+                      applicationSecretRef:
+                        key: applicationSecret
+                        name: ovh-credentials
+                      consumerKey: "${SECRET_CLUSTER_OVH_CONSUMER_KEY}"
+      - apiVersion: cert-manager.io/v1
+        kind: ClusterIssuer
+        metadata:
+          name: letsencrypt-staging
+        spec:
+          acme:
+            server: https://acme-staging-v02.api.letsencrypt.org/directory
+            email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
+            privateKeySecretRef:
+              name: letsencrypt-production
+            solvers:
+              - dns01:
+                  webhook:
+                    groupName: "${SECRET_DOMAIN}"
+                    solverName: ovh
+                    config:
+                      endpoint: ovh-eu
+                      applicationKey: "${SECRET_CLUSTER_OVH_APPLICATION_KEY}"
+                      applicationSecretRef:
+                        key: applicationSecret
+                        name: ovh-credentials
+                      consumerKey: "${SECRET_CLUSTER_OVH_CONSUMER_KEY}"

kubernetes/cluster-0/apps/networking/cert-manager/issuers/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml