From 91e2dee66b82bd7bd43427fbafd2bcac9bce133e Mon Sep 17 00:00:00 2001
From: James Andariese <james@strudelline.net>
Date: Sun, 24 Dec 2023 19:53:32 -0600
Subject: [PATCH] cert-manager now uses kustomize

---
 cert-manager/deploy.sh          |  6 ++++--
 cert-manager/diff.sh            |  2 +-
 cert-manager/kustomization.yaml | 20 ++++++++++++++++++++
 cert-manager/values.yaml        |  6 ------
 4 files changed, 25 insertions(+), 9 deletions(-)
 create mode 100644 cert-manager/kustomization.yaml
 delete mode 100644 cert-manager/values.yaml

diff --git a/cert-manager/deploy.sh b/cert-manager/deploy.sh
index 70d1ddf..57a5995 100644
--- a/cert-manager/deploy.sh
+++ b/cert-manager/deploy.sh
@@ -1,2 +1,4 @@
-helm repo add jetstack https://charts.jetstack.io
-helm upgrade -i --create-namespace -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+#helm repo add jetstack https://charts.jetstack.io
+#helm upgrade -i --create-namespace -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+
+kustomize build --enable-helm | kubectl apply -f -
diff --git a/cert-manager/diff.sh b/cert-manager/diff.sh
index 117240e..0436bae 100644
--- a/cert-manager/diff.sh
+++ b/cert-manager/diff.sh
@@ -1 +1 @@
-helm diff upgrade -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+kustomize build --enable-helm | kubectl diff -f -
diff --git a/cert-manager/kustomization.yaml b/cert-manager/kustomization.yaml
new file mode 100644
index 0000000..42d85fd
--- /dev/null
+++ b/cert-manager/kustomization.yaml
@@ -0,0 +1,20 @@
+kind: Kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+helmCharts:
+  - name: cert-manager
+    repo: https://charts.jetstack.io
+    namespace: cert-manager
+    version: v1.13.2
+    releaseName: cert-manager
+    includeCRDs: true
+    valuesInline:
+      extraArgs:
+        - --dns01-recursive-nameservers-only
+        - --dns01-recursive-nameservers=1.1.1.1:53
+      ingressShim.defaultIssuerKind: ClusterIssuer
+      ingressShim.defaultIssuerName: zerossl
+      installCRDs: "true"
+resources:
+  - cloudflare-api-token-sealed-secret.yaml
+  - zerossl-issuer.yaml
+  - zerossl-prod-sealed-secret.yaml
diff --git a/cert-manager/values.yaml b/cert-manager/values.yaml
deleted file mode 100644
index 158d562..0000000
--- a/cert-manager/values.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-extraArgs:
-- --dns01-recursive-nameservers-only
-- --dns01-recursive-nameservers=1.1.1.1:53
-ingressShim.defaultIssuerKind: ClusterIssuer
-ingressShim.defaultIssuerName: zerossl
-installCRDs: "true"