From 0f34b5c88e5cb04424f387fed4162ad1bb3634bc Mon Sep 17 00:00:00 2001
From: baptiste <baptiste.guillin@gmail.com>
Date: Thu, 23 Jul 2026 00:53:27 +0200
Subject: [PATCH] Add Let's Encrypt staging ClusterIssuer

---
 .../homelab/apps/cert-manager-config.yaml     | 28 +++++++++++++++++++
 .../config/clusterissuer-staging.yaml         | 14 ++++++++++
 .../cert-manager/config/kustomization.yaml    |  5 ++++
 3 files changed, 47 insertions(+)
 create mode 100644 clusters/homelab/apps/cert-manager-config.yaml
 create mode 100644 infrastructure/cert-manager/config/clusterissuer-staging.yaml
 create mode 100644 infrastructure/cert-manager/config/kustomization.yaml

diff --git a/clusters/homelab/apps/cert-manager-config.yaml b/clusters/homelab/apps/cert-manager-config.yaml
new file mode 100644
index 0000000..6af8152
--- /dev/null
+++ b/clusters/homelab/apps/cert-manager-config.yaml
@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager-config
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: homelab
+
+  source:
+    repoURL: gitea@172.16.2.52:baptiste/k8s.git
+    targetRevision: main
+    path: infrastructure/cert-manager/config
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cert-manager
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
+      - SkipDryRunOnMissingResource=true
diff --git a/infrastructure/cert-manager/config/clusterissuer-staging.yaml b/infrastructure/cert-manager/config/clusterissuer-staging.yaml
new file mode 100644
index 0000000..a3f1350
--- /dev/null
+++ b/infrastructure/cert-manager/config/clusterissuer-staging.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    email: baptiste.guillin@gmail.com
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-staging-account-key
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx
diff --git a/infrastructure/cert-manager/config/kustomization.yaml b/infrastructure/cert-manager/config/kustomization.yaml
new file mode 100644
index 0000000..cd52616
--- /dev/null
+++ b/infrastructure/cert-manager/config/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - clusterissuer-staging.yaml