patches

infrastructure/07-certmanager/kustomization.yaml

@@ -15,18 +15,19 @@ resources:
   - namespace.yaml
 
 helmCharts:
-- name: cert-manager-lego-webhook
+- name: "cert-manager-lego-webhook"
   includeCRDs: false
   version: 1.0.1
-  releaseName: cert-manager
+  releaseName: "cert-manager"
   repo: https://yxwuxuanl.github.io/cert-manager-lego-webhook/
   valuesFile: values-lego.yaml
-- name: cert-manager
+- name: "cert-manager"
   includeCRDs: false
   version: 1.14.4
-  releaseName: cert-manager
+  releaseName: "cert-manager"
   repo: https://charts.jetstack.io
   valuesFile: values.yaml
 
-# transformers:
-#   - patches/annotation-transfom.yaml
+transformers:
+  - patches/annotation-transfom.yaml
+  - patches/annotation-transfom-api.yaml

infrastructure/07-certmanager/patches/annotation-transfom-api.yaml

@@ -0,0 +1,10 @@
+apiVersion: builtin
+kind: AnnotationsTransformer
+metadata:
+  name: v1alpha1.acme.steffenillium.de
+annotations:
+  cert-manager.io/inject-ca-from: cert-manager/cert-manager
+fieldSpecs:
+- path: metadata/annotations
+  create: true
+  kind: APIService

infrastructure/07-certmanager/values-lego.yaml

@@ -5,5 +5,5 @@ webhook:
     tag: main
 
 certManager:
-  namespace: cert-manager
-  serviceAccountName: cert-manager-lego-webhook
+  namespace: "cert-manager"
+  serviceAccountName: "cert-manager-lego-webhook"

infrastructure/07-certmanager/values.yaml

@@ -4,8 +4,8 @@ global:
 
 webhook:
   securePort: 10260
-  # validatingWebhookConfigurationAnnotations: 
-  #   cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
+  validatingWebhookConfigurationAnnotations: 
+    cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
 
 
 clusterResourceNamespace: cert-manager