b359cc9560
cert-manager and CloudNativePG operator installs must complete before their custom resources (ClusterIssuer, CNPG Cluster) can be applied. Split into separate kustomize dirs so the ApplicationSet creates independent ArgoCD apps that can sync in order: - platform-cert-manager → installs operator - platform-cert-manager-config → creates ClusterIssuers (after CRDs exist) - platform-cloudnativepg → installs operator - platform-cloudnativepg-cluster → creates PG cluster (after CRDs exist)
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
# Prerequisites: cert-manager must be installed via Helm first.
|
|
# Install: helm install cert-manager jetstack/cert-manager --namespace cert-manager --set crds.enabled=true --version v1.16.3
|
|
# This file configures the Let's Encrypt issuers after cert-manager is running.
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-staging
|
|
spec:
|
|
acme:
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
email: admin@homelab.local
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging-key
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: api-token
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-production
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: admin@homelab.local
|
|
privateKeySecretRef:
|
|
name: letsencrypt-production-key
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: api-token
|