infra(cert-manager): Add cluster issuer

- Issue certificate for scriptscribe

infra/cert-manager/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 
 resources:
   - https://github.com/cert-manager/cert-manager/releases/download/v1.19.2/cert-manager.yaml
+  - letsencrypt-issuer.yaml

infra/cert-manager/letsencrypt-issuer.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: [email protected]
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    solvers:
+      - http01:
+          ingress:
+            class: traefik

manifests/scriptscribe/ingress.yaml

@@ -3,10 +3,16 @@ kind: Ingress
 metadata:
   name: ingress-rules
   annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: web
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
 spec:
+  tls:
+    - hosts:
+      - scriptscribe-k3s.whyredfire.tech
+      secretName: scriptscribe-k3s-tls
   rules:
-    - host: scriptscribe.whyredfire.tech
+    - host: scriptscribe-k3s.whyredfire.tech
       http:
         paths:
           - path: /api