cert-manager now uses kustomize

cert-manager/deploy.sh

@@ -1,2 +1,4 @@
-helm repo add jetstack https://charts.jetstack.io
-helm upgrade -i --create-namespace -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+#helm repo add jetstack https://charts.jetstack.io
+#helm upgrade -i --create-namespace -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+
+kustomize build --enable-helm | kubectl apply -f -

cert-manager/diff.sh

@@ -1 +1 @@
-helm diff upgrade -n cert-manager cert-manager jetstack/cert-manager -f values.yaml
+kustomize build --enable-helm | kubectl diff -f -

cert-manager/kustomization.yaml

@@ -0,0 +1,20 @@
+kind: Kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+helmCharts:
+  - name: cert-manager
+    repo: https://charts.jetstack.io
+    namespace: cert-manager
+    version: v1.13.2
+    releaseName: cert-manager
+    includeCRDs: true
+    valuesInline:
+      extraArgs:
+        - --dns01-recursive-nameservers-only
+        - --dns01-recursive-nameservers=1.1.1.1:53
+      ingressShim.defaultIssuerKind: ClusterIssuer
+      ingressShim.defaultIssuerName: zerossl
+      installCRDs: "true"
+resources:
+  - cloudflare-api-token-sealed-secret.yaml
+  - zerossl-issuer.yaml
+  - zerossl-prod-sealed-secret.yaml

cert-manager/values.yaml

@@ -1,6 +0,0 @@
-extraArgs:
-- --dns01-recursive-nameservers-only
-- --dns01-recursive-nameservers=1.1.1.1:53
-ingressShim.defaultIssuerKind: ClusterIssuer
-ingressShim.defaultIssuerName: zerossl
-installCRDs: "true"