118 lines
2.5 KiB
YAML
118 lines
2.5 KiB
YAML
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: cert-manager
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: cert-manager
|
|
path: ./kubernetes/apps/cert-manager/app
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: flux-system
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: clusterissuer-secrets
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: cert-manager
|
|
path: ./clusterissuer
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: home-cluster-ops-secrets
|
|
dependsOn:
|
|
- name: repositories
|
|
namespace: flux-system
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: sops-age
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: clusterissuer
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: cert-manager
|
|
path: ./kubernetes/apps/cert-manager/clusterissuer
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: flux-system
|
|
dependsOn:
|
|
- name: clusterissuer-secrets
|
|
namespace: cert-manager
|
|
- name: cert-manager
|
|
namespace: cert-manager
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: Secret
|
|
name: clusterissuer-secrets
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: certificate-secrets
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: cert-manager
|
|
path: ./certificates
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: home-cluster-ops-secrets
|
|
dependsOn:
|
|
- name: repositories
|
|
namespace: flux-system
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: cert-manager-sops-age
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: certificates
|
|
namespace: cert-manager
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: cert-manager
|
|
path: ./kubernetes/apps/cert-manager/certificates
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: flux-system
|
|
dependsOn:
|
|
- name: certificate-secrets
|
|
namespace: cert-manager
|
|
- name: cert-manager
|
|
namespace: cert-manager
|
|
- name: clusterissuer
|
|
namespace: cert-manager
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: Secret
|
|
name: certificate-secrets |