apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: cert-manager
  namespace: cert-manager
spec:
  interval: 1h
  driftDetection:
    mode: enabled
  chart:
    spec:
      chart: cert-manager
      version: v1.15.0
      sourceRef:
        kind: HelmRepository
        namespace: cert-manager
        name: cert-manager
      interval: 1h
  install:
    crds: Create
  upgrade:
    crds: CreateReplace
  values:
    installCRDs: true

    podLabels:
      rpi5.cluster.policy/egress-kubeapi: "true"
      rpi5.cluster.policy/egress-namespace: "true"
      rpi5.cluster.policy/egress-world: "true"
      rpi5.cluster.policy/ingress-namespace: "true"
    webhook:
      podLabels:
        rpi5.cluster.policy/egress-kubeapi: "true"
    cainjector:
      podLabels:
        rpi5.cluster.policy/egress-kubeapi: "true"

    global:
      priorityClassName: system-cluster-critical

    podDnsConfig:
      nameservers:
        - 1.1.1.1
        - 1.0.0.1