k8s-kaisers-info/gitops-kaisers-info/templates/cert-manager.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cert-manager
  namespace: {{ .Values.spec.namespace }}
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: cert-manager
    name: {{ .Values.spec.destination.name }}
  project: {{ .Values.spec.project }}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
  source:
    chart: cert-manager
    repoURL: https://charts.jetstack.io
    targetRevision: 1.7.1
    helm:
      releaseName: cert-manager
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
  namespace: cert-manager
spec:
  acme:
    email: "admin@kaisers.info" # replace this
    privateKeySecretRef:
      name: "staging-issuer-account-key"
    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
    solvers:
      - http01:
          ingress:
            class: "traefik"
            ingressTemplate:
              metadata:
                annotations:
                  kubernetes.io/ingress.class: "traefik"
                  traefik.ingress.kubernetes.io/router.priority: "100"
                  traefik.ingress.kubernetes.io/redirect-entry-point: "https"
#                  traefik.ingress.kubernetes.io/router.tls: "true"
#                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
#                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
  namespace: cert-manager
spec:
  acme:
    email: "admin@kaisers.info" # replace this
    privateKeySecretRef:
      name: "prod-issuer-account-key"
    server: "https://acme-v02.api.letsencrypt.org/directory"
    solvers:
      - http01:
          ingress:
            class: "traefik"
            ingressTemplate:
              metadata:
                annotations:
                  kubernetes.io/ingress.class: "traefik"
                  traefik.ingress.kubernetes.io/router.tls: "true"
                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"