diff --git a/deployment/cert-issuer.yaml b/deployment/cert-issuer.yaml new file mode 100644 index 0000000..23cab2e --- /dev/null +++ b/deployment/cert-issuer.yaml @@ -0,0 +1,45 @@ +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: trust-manager-selfsigned-issuer +spec: + selfSigned: {} +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: cluster-root-certificate + namespace: cert-manager +spec: + isCA: true + commonName: cluster-root-certificate-ca + secretName: cluster-root-certificate-ca-secret + privateKey: + algorithm: ECDSA + size: 256 + issuerRef: + name: trust-manager-selfsigned-issuer + kind: ClusterIssuer + group: cert-manager.io +--- +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: default-cluster-ca-issuer +spec: + ca: + secretName: cluster-root-certificate-ca-secret +--- +apiVersion: trust.cert-manager.io/v1alpha1 +kind: Bundle +metadata: + name: in-cluster-trust-bundle +spec: + sources: + - useDefaultCAs: true + - secret: + name: "cluster-root-certificate-ca-secret" + key: "tls.crt" + target: + configMap: + key: "trust-bundle.pem" \ No newline at end of file diff --git a/deployment/project.yaml b/deployment/project-argo.yaml similarity index 100% rename from deployment/project.yaml rename to deployment/project-argo.yaml diff --git a/kustomization.yaml b/kustomization.yaml index bae1769..98ecf79 100644 --- a/kustomization.yaml +++ b/kustomization.yaml @@ -3,7 +3,8 @@ kind: Kustomization namespace: argocd resources: - - ./deployment/project.yaml + - ./deployment/cert-issuer.yaml + - ./deployment/project-argo.yaml - ./deployment/auth-service-argo.yaml - ./deployment/memgraph-argo.yaml - ./deployment/backend-argo.yaml