From b14cecb3e4d5a7292894474c645bf5a99a10d93a Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Sat, 21 Feb 2026 12:11:34 +0530
Subject: [PATCH] add-ons: Add cert manager configuration

---
 add-ons/cert-manager/cluster-issuer-prod.yaml | 17 +++++++++++
 .../cert-manager/cluster-issuer-staging.yaml  | 17 +++++++++++
 applications/add-ons/cert-manager.yaml        | 29 +++++++++++++++++++
 applications/kustomization.yaml               |  1 +
 4 files changed, 64 insertions(+)
 create mode 100644 add-ons/cert-manager/cluster-issuer-prod.yaml
 create mode 100644 add-ons/cert-manager/cluster-issuer-staging.yaml
 create mode 100644 applications/add-ons/cert-manager.yaml

diff --git a/add-ons/cert-manager/cluster-issuer-prod.yaml b/add-ons/cert-manager/cluster-issuer-prod.yaml
new file mode 100644
index 0000000..c9ae7fb
--- /dev/null
+++ b/add-ons/cert-manager/cluster-issuer-prod.yaml
@@ -0,0 +1,17 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-production
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: whyredfire@gmail.com
+    privateKeySecretRef:
+      name: letsencrypt-production
+    solvers:
+      - http01:
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: traefik-gateway
+                namespace: traefik
+                kind: Gateway
diff --git a/add-ons/cert-manager/cluster-issuer-staging.yaml b/add-ons/cert-manager/cluster-issuer-staging.yaml
new file mode 100644
index 0000000..bb96abb
--- /dev/null
+++ b/add-ons/cert-manager/cluster-issuer-staging.yaml
@@ -0,0 +1,17 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: whyredfire@gmail.com
+    privateKeySecretRef:
+      name: letsencrypt-staging
+    solvers:
+      - http01:
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: traefik-gateway
+                namespace: traefik
+                kind: Gateway
diff --git a/applications/add-ons/cert-manager.yaml b/applications/add-ons/cert-manager.yaml
new file mode 100644
index 0000000..631442c
--- /dev/null
+++ b/applications/add-ons/cert-manager.yaml
@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://charts.jetstack.io
+      chart: cert-manager
+      targetRevision: v1.19.3
+      helm:
+        values: |
+          crds:
+            enabled: true
+    - repoURL: https://gitea.whyredfire.tech/whyredfire/gitops.git
+      targetRevision: main
+      path: add-ons/cert-manager
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: cert-manager
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
diff --git a/applications/kustomization.yaml b/applications/kustomization.yaml
index d6acc5e..2386ea9 100644
--- a/applications/kustomization.yaml
+++ b/applications/kustomization.yaml
@@ -4,5 +4,6 @@ kind: Kustomization
 resources:
   # add-ons
   - add-ons/traefik.yaml
+  - add-ons/cert-manager.yaml
   # services
   - services/app-autoregexbot.yaml