Add Let's Encrypt staging ClusterIssuer

bootstrap/argocd/project.yaml

@@ -8,6 +8,7 @@ spec:
 
   sourceRepos:
     - 'gitea@172.16.2.52:baptiste/k8s.git'
+    - 'oci://quay.io/jetstack/charts/cert-manager'
 
   destinations:
     - namespace: '*'

clusters/homelab/apps/cert-manager-config.yaml

@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager-config
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: homelab
+
+  source:
+    repoURL: gitea@172.16.2.52:baptiste/k8s.git
+    targetRevision: main
+    path: infrastructure/cert-manager/config
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cert-manager
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
+      - SkipDryRunOnMissingResource=true

clusters/homelab/apps/cert-manager.yaml

@@ -3,15 +3,17 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/compare-options: ServerSideDiff=true
   finalizers:
     - resources-finalizer.argocd.argoproj.io
 spec:
   project: homelab
 
   sources:
-    - repoURL: oci://quay.io/jetstack/charts
-      chart: cert-manager
+    - repoURL: oci://quay.io/jetstack/charts/cert-manager
       targetRevision: v1.20.2
+      path: .
       helm:
         releaseName: cert-manager
         valueFiles:

infrastructure/cert-manager/config/clusterissuer-staging.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    email: baptiste.guillin@gmail.com
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-staging-account-key
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx

infrastructure/cert-manager/config/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - clusterissuer-staging.yaml