bin/migrate.sh

@@ -0,0 +1,3 @@
+#kubectl get all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name | while read -r var1 var2; do kubectl annotate $var1 $var2 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager" --overwrite; done
+
+kubectl get ValidatingWebhookConfiguration,all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings,MutatingWebhookConfiguration -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name,"ns":.metadata.namespace | while read -r var1 var2 var3; do kubectl annotate $var1 $var2 -n $var3 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager"; done

helmfile.yaml

@@ -11,5 +11,10 @@ releases:
     namespace: kube-system
     createNamespace: false
 
+  - <<: *cert-manager 
+    installed: true
+    namespace: cert-manager
+    createNamespace: false
+
 helmfiles:
   - path: {{.Environment.Name }}/helmfile.yaml

releases.yaml

@@ -30,6 +30,13 @@ templates:
     values:
       - common/values.{{ .Release.Name }}.yaml
 
+  cert-manager: &cert-manager
+    name: cert-manager
+    chart: jetstack/cert-manager
+    version: 1.10.1
+    inherit: 
+      - template: crd-management-hook
+
   openvpn: &openvpn
     name: openvpn
     chart: allanger-charts/openvpn

repositories.yaml

@@ -4,3 +4,6 @@ repositories:
     url: https://kubernetes-sigs.github.io/metrics-server/
   - name: allanger-charts
     url: https://allanger.github.io/allanger-charts
+  - name: jetstack
+    url: https://charts.jetstack.io
+