From 50d2d1047c6cff9ed8291b401515713f121a92fa Mon Sep 17 00:00:00 2001
From: Micke Nordin <kano@sunet.se>
Date: Thu, 21 Nov 2024 11:17:40 +0100
Subject: [PATCH] Add cert-manager

---
 portal/base/portal-cert-manager.yml     | 15 +++++++++++++++
 portal/overlays/test/portal-ingress.yml |  2 ++
 2 files changed, 17 insertions(+)
 create mode 100644 portal/base/portal-cert-manager.yml

diff --git a/portal/base/portal-cert-manager.yml b/portal/base/portal-cert-manager.yml
new file mode 100644
index 0000000..bc70328
--- /dev/null
+++ b/portal/base/portal-cert-manager.yml
@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: drive@sunet.se
+    privateKeySecretRef:
+      name: letsencrypt
+    solvers:
+      - http01:
+          ingress: 
+            class: nginx
+
diff --git a/portal/overlays/test/portal-ingress.yml b/portal/overlays/test/portal-ingress.yml
index 42b7333..832369c 100644
--- a/portal/overlays/test/portal-ingress.yml
+++ b/portal/overlays/test/portal-ingress.yml
@@ -6,6 +6,8 @@ metadata:
   namespace: portal
   annotations:
     kubernetes.io/ingress.class: nginx
+    cert-manager.io/issuer: "letsencrypt"
+    acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
   defaultBackend:
     service: