Sealed secrets

gitops-kaisers-info/templates/sealed-secrets.yaml

@@ -0,0 +1,62 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: {{ .Values.spec.namespace }}
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: "cert-manager"
+    name: {{ .Values.spec.destination.name }}
+  project: {{ .Values.spec.project }}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+  source:
+    chart: "cert-manager"
+    repoURL: "https://charts.jetstack.io"
+    targetRevision: "1.8.0"
+    helm:
+      releaseName: cert-manager
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: "letsencrypt-staging"
+  namespace: "cert-manager"
+spec:
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "staging-issuer-account-key"
+    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: "letsencrypt-prod"
+  namespace: "cert-manager"
+spec:
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "prod-issuer-account-key"
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"