add dashboard

clusters/yc-k8s-test/infrastructure/kustomization.yaml

@@ -45,3 +45,15 @@ patches:
       kind: Certificate
       name: dashboard-tls
       namespace: kubernetes-dashboard
+  - path: ./patches/clusterissuer-letsencrypt.yaml
+    target:
+      group: cert-manager.io
+      version: v1
+      kind: ClusterIssuer
+      name: letsencrypt-issuer
+  - path: ./patches/clusterissuer-letsencrypt-istio.yaml
+    target:
+      group: cert-manager.io
+      version: v1
+      kind: ClusterIssuer
+      name: letsencrypt-issuer-istio

clusters/yc-k8s-test/infrastructure/patches/clusterissuer-letsencrypt-istio.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-issuer-istio
+spec:
+  acme:
+    email: "pavel@sarex.io"
+    privateKeySecretRef:
+      name: letsencrypt-secret-key
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: istio

clusters/yc-k8s-test/infrastructure/patches/clusterissuer-letsencrypt.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-issuer
+spec:
+  acme:
+    email: "pavel@sarex.io"
+    privateKeySecretRef:
+      name: letsencrypt-secret-key
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: nginx

infrastructure/cert-manager/base/clusterissuer-letsencrypt-istio.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-issuer-istio
+spec:
+  acme:
+    email: "devnull@example.com"
+    privateKeySecretRef:
+      name: letsencrypt-secret-key
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: istio

infrastructure/cert-manager/base/clusterissuer-letsencrypt.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-issuer
+spec:
+  acme:
+    email: "devnull@example.com"
+    privateKeySecretRef:
+      name: letsencrypt-secret-key
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: nginx

infrastructure/cert-manager/base/helmrelease.yaml

@@ -21,6 +21,9 @@ spec:
     remediation:
       retries: 3
   values:
+    clusterIssuer:
+      letsencrypt_issuer: null
+      letsencrypt_issuer_istio: null
     crds:
       enabled: true
     extraPodMonitors: []

infrastructure/cert-manager/base/kustomization.yaml

@@ -4,3 +4,5 @@ namespace: cert-manager
 resources:
   - namespace.yaml
   - helmrelease.yaml
+  - clusterissuer-letsencrypt.yaml
+  - clusterissuer-letsencrypt-istio.yaml