feat(helm): release cluster-acme-issuer

charts/cluster-issuer/Chart.yaml → charts/cluster-acme-issuer/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
-name: cluster-issuer
-description: cert-manager ClusterIsser
+name: cluster-acme-issuer
+description: cert-manager ClusterIssuer for ACME
 
 # A chart can be either an 'application' or a 'library' chart.
 #
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/cluster-issuer/templates/_helpers.tpl → charts/cluster-acme-issuer/templates/_helpers.tpl

@@ -1,7 +1,7 @@
 {{/*
 Expand the name of the chart.
 */}}
-{{- define "cluster-issuer.name" -}}
+{{- define "cluster-acme-issuer.name" -}}
 {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
@@ -10,7 +10,7 @@ Create a default fully qualified app name.
 We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
 If release name contains chart name it will be used as a full name.
 */}}
-{{- define "cluster-issuer.fullname" -}}
+{{- define "cluster-acme-issuer.fullname" -}}
 {{- if .Values.fullnameOverride }}
 {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
 {{- else }}
@@ -26,16 +26,16 @@ If release name contains chart name it will be used as a full name.
 {{/*
 Create chart name and version as used by the chart label.
 */}}
-{{- define "cluster-issuer.chart" -}}
+{{- define "cluster-acme-issuer.chart" -}}
 {{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
 {{/*
 Common labels
 */}}
-{{- define "cluster-issuer.labels" -}}
-helm.sh/chart: {{ include "cluster-issuer.chart" . }}
-{{ include "cluster-issuer.selectorLabels" . }}
+{{- define "cluster-acme-issuer.labels" -}}
+helm.sh/chart: {{ include "cluster-acme-issuer.chart" . }}
+{{ include "cluster-acme-issuer.selectorLabels" . }}
 {{- if .Chart.AppVersion }}
 app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
 {{- end }}
@@ -45,17 +45,17 @@ app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{/*
 Selector labels
 */}}
-{{- define "cluster-issuer.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "cluster-issuer.name" . }}
+{{- define "cluster-acme-issuer.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "cluster-acme-issuer.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
 {{/*
 Create the name of the service account to use
 */}}
-{{- define "cluster-issuer.serviceAccountName" -}}
+{{- define "cluster-acme-issuer.serviceAccountName" -}}
 {{- if .Values.serviceAccount.create }}
-{{- default (include "cluster-issuer.fullname" .) .Values.serviceAccount.name }}
+{{- default (include "cluster-acme-issuer.fullname" .) .Values.serviceAccount.name }}
 {{- else }}
 {{- default "default" .Values.serviceAccount.name }}
 {{- end }}

charts/cluster-issuer/templates/cluster-issuer.yaml → charts/cluster-acme-issuer/templates/cluster-issuer.yaml

@@ -1,19 +1,19 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: {{ include "cluster-issuer.fullname" . }}
+  name: {{ include "cluster-acme-issuer.fullname" . }}
   labels:
-    {{- include "cluster-issuer.labels" . | nindent 4 }}
+    {{- include "cluster-acme-issuer.labels" . | nindent 4 }}
 spec:
   acme:
     server: {{ .Values.server }}
     email: {{ .Values.email }}
     preferredChain: "ISRG Root X1"
     privateKeySecretRef:
-      name: {{ include "cluster-issuer.fullname" . }}-privkey
+      name: {{ include "cluster-acme-issuer.fullname" . }}-privkey
     solvers:
       - dns01:
           cloudflare:
             apiTokenSecretRef:
-              name: {{ include "cluster-issuer.fullname" . }}
-              key: api-token
+              name: {{ include "cluster-acme-issuer.fullname" . }}
+              key: token

charts/cluster-issuer/templates/external-secret.yaml → charts/cluster-acme-issuer/templates/external-secret.yaml

@@ -1,19 +1,19 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: {{ include "cluster-issuer.fullname" . }}
+  name: {{ include "cluster-acme-issuer.fullname" . }}
   labels:
-    {{- include "cluster-issuer.labels" . | nindent 4 }}
+    {{- include "cluster-acme-issuer.labels" . | nindent 4 }}
 spec:
   refreshInterval: 1h
   target:
-    name: {{ include "cluster-issuer.fullname" . }}
+    name: {{ include "cluster-acme-issuer.fullname" . }}
     deletionPolicy: Delete
     creationPolicy: Owner
   data:
     - remoteRef:
         key: {{ required "A valid .Values.externalSecrets.remoteSecretName entry required!" .Values.externalSecrets.remoteSecretName }}
-      secretKey: api-token
+      secretKey: token
   secretStoreRef:
     name: {{ required "A valid .Values.externalSecrets.secretStore.name entry required!" .Values.externalSecrets.secretStore.name }}
     kind: {{ required "A valid .Values.externalSecrets.secretStore.kind entry required!" .Values.externalSecrets.secretStore.kind }}

values/cluster-issuer/backbone.yaml → values/cluster-acme-issuer/backbone.yaml

@@ -3,7 +3,7 @@ email: "[email protected]"
 server: https://acme-v02.api.letsencrypt.org/directory
 
 externalSecrets:
-  remoteSecretName: k8s_cert_manager_api_token
+  remoteSecretName: /homelab/cluster/backbone/token/cloudflare/cert-manager-dns-challenge
   secretStore:
     name: cluster-secrets
     kind: ClusterSecretStore

values/cluster-issuer/prod.yaml → values/cluster-acme-issuer/prod.yaml

@@ -3,7 +3,7 @@ email: "[email protected]"
 server: https://acme-v02.api.letsencrypt.org/directory
 
 externalSecrets:
-  remoteSecretName: k8s_cert_manager_api_token
+  remoteSecretName: /homelab/cluster/vultr/token/cloudflare/cert-manager-dns-challenge
   secretStore:
     name: cluster-secrets
     kind: ClusterSecretStore