add cert-manager to core-deployments

cert-manager/issuer.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+ name: letsencrypt-prod
+spec:
+ acme:
+   email: letsencrypt@ar21.de
+   server: https://acme-v02.api.letsencrypt.org/directory
+   privateKeySecretRef:
+     name: letsencrypt-prod-key
+   solvers:
+     - http01:
+         ingress:
+           class: traefik
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+ name: letsencrypt-staging
+spec:
+ acme:
+   email: letsencrypt@ar21.de
+   server: https://acme-staging-v02.api.letsencrypt.org/directory
+   privateKeySecretRef:
+     name: letsencrypt-staging-key
+   solvers:
+     - http01:
+         ingress:
+           class: traefik

cert-manager/values.yaml

@@ -0,0 +1,37 @@
+namespace: cert-manager
+replicaCount: 3
+installCRDs: true
+podDisruptionBudget:
+  enabled: true
+strategy:
+  type: RollingUpdate
+  rollingUpdate:
+    maxUnavailable: 1
+    maxSurge: 0
+ingressShim:
+  defaultIssuerName: letsencrypt-prod
+  defaultIssuerKind: ClusterIssuer
+  defaultIssuerGroup: cert-manager.io
+webhook:
+  replicaCount: 3
+  podDisruptionBudget:
+    enabled: true
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 1
+      maxSurge: 0
+cainjector:
+  replicaCount: 3
+  podDisruptionBudget:
+    enabled: true
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 1
+      maxSurge: 0
+crds:
+  enabled: true
+prometheus:
+  servicemonitor:
+    enabled: true