mirror of
https://github.com/auricom/home-cluster.git
synced 2025-09-30 15:37:44 +02:00
61 lines
1.3 KiB
YAML
61 lines
1.3 KiB
YAML
---
|
|
apiVersion: source.toolkit.fluxcd.io/v1beta1
|
|
kind: GitRepository
|
|
metadata:
|
|
name: cert-manager-webhook-ovh
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 1440m
|
|
url: https://github.com/baarde/cert-manager-webhook-ovh
|
|
ref:
|
|
branch: master
|
|
ignore: |
|
|
# exclude all
|
|
/*
|
|
# include charts directory
|
|
!/deploy/
|
|
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cert-manager-webhook-ovh
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 5m
|
|
chart:
|
|
spec:
|
|
chart: ./deploy/cert-manager-webhook-ovh
|
|
version: 0.2.0
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: cert-manager-webhook-ovh
|
|
namespace: flux-system
|
|
interval: 1440m
|
|
values:
|
|
groupName: xpander.ovh
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: cert-manager-webhook-ovh:secret-reader
|
|
namespace: cert-manager
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["secrets"]
|
|
resourceNames: ["ovh-credentials"]
|
|
verbs: ["get", "watch"]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: cert-manager-webhook-ovh:secret-reader
|
|
namespace: cert-manager
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: cert-manager-webhook-ovh:secret-reader
|
|
subjects:
|
|
- apiGroup: ""
|
|
kind: ServiceAccount
|
|
name: cert-manager-webhook-ovh
|