Cert-manager deployed

k8s/cert-manager/cert-manager.yaml

@@ -0,0 +1,20 @@
+apiVersion: helm.fluxcd.io/v1
+kind: HelmRelease
+metadata:
+  name: helm-cert-manager
+  namespace: flux
+spec:
+  releaseName: cert-manager
+  targetNamespace: cert-manager
+  chart:
+    repository: https://charts.jetstack.io
+    version: v0.14.1
+    name: cert-manager
+  values:
+    replicaCount: 1
+    webhook:
+      replicaCount: 1
+    podLabels:
+      app: cert-manager
+    prometheus:
+      enabled: false

k8s/cert-manager/production-issuer.yaml

@@ -0,0 +1,19 @@
+   apiVersion: cert-manager.io/v1alpha2
+   kind: Issuer
+   metadata:
+     name: letsencrypt-prod
+     namespace: cert-manager
+   spec:
+     acme:
+       # The ACME server URL
+       server: https://acme-v02.api.letsencrypt.org/directory
+       # Email address used for ACME registration
+       email: moritz@moritzgraf.de
+       # Name of a secret used to store the ACME account private key
+       privateKeySecretRef:
+         name: letsencrypt-prod
+       # Enable the HTTP-01 challenge provider
+       solvers:
+       - http01:
+           ingress:
+             class: nginx

k8s/cert-manager/staging-issuer.yaml

@@ -0,0 +1,19 @@
+   apiVersion: cert-manager.io/v1alpha2
+   kind: Issuer
+   metadata:
+     name: letsencrypt-staging
+     namespace: cert-manager
+   spec:
+     acme:
+       # The ACME server URL
+       server: https://acme-staging-v02.api.letsencrypt.org/directory
+       # Email address used for ACME registration
+       email: moritz@moritzgraf.de
+       # Name of a secret used to store the ACME account private key
+       privateKeySecretRef:
+         name: letsencrypt-staging
+       # Enable the HTTP-01 challenge provider
+       solvers:
+       - http01:
+           ingress:
+             class:  nginx