Merge branch 'feature/cert-manager' into develop

Author: codejsha

cert-manager/all.sh

@@ -9,6 +9,6 @@ kubectl cert-manager inspect secret minio1-cert
 
 ######################################################################
 
-### debuggging
+### debug
 
 kubectl get endpoints -n cert-manager my-cert-manager-webhook

cert-manager/cert-manager-commands.sh

@@ -0,0 +1,31 @@
+provider "kubernetes" {
+  config_path = "~/.kube/config"
+}
+
+provider "helm" {
+  kubernetes {
+    config_path = "~/.kube/config"
+  }
+}
+
+resource "kubernetes_namespace" "cert_manager" {
+  metadata {
+    name = "cert-manager"
+    labels = {
+      "istio-injection" = "enabled"
+    }
+  }
+}
+
+resource "helm_release" "cert_manager" {
+  name       = "cert-manager"
+  repository = "https://charts.jetstack.io"
+  chart      = "cert-manager"
+  version    = "v1.16.1"
+  set {
+    name  = "crds.enabled"
+    value = true
+  }
+  namespace = kubernetes_namespace.cert_manager.metadata.0.name
+  depends_on = [kubernetes_namespace.cert_manager]
+}

cert-manager/cert-manager-namespace.yaml

@@ -0,0 +1,11 @@
+provider "kubernetes" {
+  config_path = "~/.kube/config"
+}
+
+resource "kubernetes_manifest" "selfsigned_cluster_issuer" {
+  manifest = yamldecode(file("${path.module}/selfsigned-cluster-issuer.yaml"))
+}
+
+# resource "kubernetes_manifest" "selfsigned_issuer" {
+#   manifest = yamldecode(file("${path.module}/selfsigned-issuer.yaml"))
+# }

cert-manager/helm/cert-manager.tf

@@ -1,4 +1,3 @@
----
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:

cert-manager/helm/helm-install-cert-manager.sh

@@ -1,7 +1,7 @@
----
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
   name: selfsigned-issuer
+  # namespace: default
 spec:
   selfSigned: {}