---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: cert-manager-issuers
  namespace: default
spec:
  interval: 15m
  chart:
    spec:
      chart: raw
      version: v0.3.1
      sourceRef:
        kind: HelmRepository
        name: dysnix
        namespace: flux-system
  install:
    createNamespace: true
    remediation:
      retries: 5
  upgrade:
    remediation:
      retries: 5
  dependsOn:
    - name: cert-manager
      namespace: default
    - name: cert-manager-webhook-ovh
      namespace: default
  values:
    resources:
      - apiVersion: cert-manager.io/v1
        kind: ClusterIssuer
        metadata:
          name: letsencrypt-production
        spec:
          acme:
            server: https://acme-v02.api.letsencrypt.org/directory
            email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
            privateKeySecretRef:
              name: letsencrypt-production
            solvers:
              - dns01:
                  webhook:
                    groupName: "${SECRET_DOMAIN}"
                    solverName: ovh
                    config:
                      endpoint: ovh-eu
                      applicationKey: "${SECRET_CLUSTER_OVH_APPLICATION_KEY}"
                      applicationSecretRef:
                        key: applicationSecret
                        name: ovh-credentials
                      consumerKey: "${SECRET_CLUSTER_OVH_CONSUMER_KEY}"
      - apiVersion: cert-manager.io/v1
        kind: ClusterIssuer
        metadata:
          name: letsencrypt-staging
        spec:
          acme:
            server: https://acme-staging-v02.api.letsencrypt.org/directory
            email: "${SECRET_CLUSTER_DOMAIN_EMAIL}"
            privateKeySecretRef:
              name: letsencrypt-production
            solvers:
              - dns01:
                  webhook:
                    groupName: "${SECRET_DOMAIN}"
                    solverName: ovh
                    config:
                      endpoint: ovh-eu
                      applicationKey: "${SECRET_CLUSTER_OVH_APPLICATION_KEY}"
                      applicationSecretRef:
                        key: applicationSecret
                        name: ovh-credentials
                      consumerKey: "${SECRET_CLUSTER_OVH_CONSUMER_KEY}"