Add helm chart

clank/platform/cert-manager/certificate.yaml

@@ -1,25 +1,15 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
 metadata:
-  name: letsencrypt-issuer
+  name: clank
+  namespace: kube-system
 spec:
-  acme:
-    # You must replace this email address with your own.
-    # Let's Encrypt will use this to contact you about expiring
-    # certificates, and issues related to your account.
-    email: contact@kjuulh.io
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
-    privateKeySecretRef:
-      # Secret resource that will be used to store the account's private key.
-      name: letsencrypt-issuer-secret
-    # Add a single challenge solver, HTTP01 using nginx
-    solvers:
-    - dns01:
-        cloudflare:
-          apiTokenSecretRef:
-            name: cloudflare-api-token-secret
-            key: api-token
-      selector:
+  commonName: kjuulh.app
+  secretName: clank-cert
   dnsNames:
-        - 'kjuulh.app'
-        - '*.kjuulh.app'
+    - kjuulh.app
+    - *.kjuulh.app
+  issuerRef:
+    name: letsencrypt-issuer
+    kind: ClusterIssuer

clank/platform/cert-manager/cluster-issuer.yaml

@@ -0,0 +1,25 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-issuer
+spec:
+  acme:
+    # You must replace this email address with your own.
+    # Let's Encrypt will use this to contact you about expiring
+    # certificates, and issues related to your account.
+    email: contact@kjuulh.io
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      # Secret resource that will be used to store the account's private key.
+      name: letsencrypt-issuer-secret
+    # Add a single challenge solver, HTTP01 using nginx
+    solvers:
+    - dns01:
+        cloudflare:
+          apiTokenSecretRef:
+            name: cloudflare-api-token-secret
+            key: api-token
+      selector:
+        dnsNames:
+        - 'kjuulh.app'
+        - '*.kjuulh.app'

clank/platform/traefik/ingress.yaml

@@ -14,3 +14,5 @@ spec:
       services: # Service to redirect requests to
         - name: api@internal # Special service created by Traefik pod
           kind: TraefikService
+  tls:
+    secretName: clank-cert