feat(helm): release cluster-issuer 0.3.0

charts/cluster-acme-issuer/Chart.yaml → charts/cluster-issuer/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
-name: cluster-acme-issuer
-description: cert-manager ClusterIssuer for ACME
+name: cluster-issuer
+description: cert-manager ClusterIssuer
 
 # A chart can be either an 'application' or a 'library' chart.
 #
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.0
+version: 0.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/cluster-acme-issuer/templates/_helpers.tpl → charts/cluster-issuer/templates/_helpers.tpl

@@ -1,7 +1,7 @@
 {{/*
 Expand the name of the chart.
 */}}
-{{- define "cluster-acme-issuer.name" -}}
+{{- define "cluster-issuer.name" -}}
 {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
@@ -10,7 +10,7 @@ Create a default fully qualified app name.
 We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
 If release name contains chart name it will be used as a full name.
 */}}
-{{- define "cluster-acme-issuer.fullname" -}}
+{{- define "cluster-issuer.fullname" -}}
 {{- if .Values.fullnameOverride }}
 {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
 {{- else }}
@@ -26,16 +26,16 @@ If release name contains chart name it will be used as a full name.
 {{/*
 Create chart name and version as used by the chart label.
 */}}
-{{- define "cluster-acme-issuer.chart" -}}
+{{- define "cluster-issuer.chart" -}}
 {{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
 {{/*
 Common labels
 */}}
-{{- define "cluster-acme-issuer.labels" -}}
-helm.sh/chart: {{ include "cluster-acme-issuer.chart" . }}
-{{ include "cluster-acme-issuer.selectorLabels" . }}
+{{- define "cluster-issuer.labels" -}}
+helm.sh/chart: {{ include "cluster-issuer.chart" . }}
+{{ include "cluster-issuer.selectorLabels" . }}
 {{- if .Chart.AppVersion }}
 app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
 {{- end }}
@@ -45,17 +45,17 @@ app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{/*
 Selector labels
 */}}
-{{- define "cluster-acme-issuer.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "cluster-acme-issuer.name" . }}
+{{- define "cluster-issuer.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "cluster-issuer.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
 {{/*
 Create the name of the service account to use
 */}}
-{{- define "cluster-acme-issuer.serviceAccountName" -}}
+{{- define "cluster-issuer.serviceAccountName" -}}
 {{- if .Values.serviceAccount.create }}
-{{- default (include "cluster-acme-issuer.fullname" .) .Values.serviceAccount.name }}
+{{- default (include "cluster-issuer.fullname" .) .Values.serviceAccount.name }}
 {{- else }}
 {{- default "default" .Values.serviceAccount.name }}
 {{- end }}

charts/cluster-issuer/templates/acme.yaml

@@ -0,0 +1,21 @@
+{{- if .Values.acme.enabled }}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ include "cluster-issuer.fullname" . }}-acme
+  labels:
+    {{- include "cluster-issuer.labels" . | nindent 4 }}
+spec:
+  acme:
+    server: {{ .Values.acme.server }}
+    email: {{ .Values.acme.email }}
+    preferredChain: "ISRG Root X1"
+    privateKeySecretRef:
+      name: {{ include "cluster-issuer.fullname" . }}-privkey
+    solvers:
+      - dns01:
+          cloudflare:
+            apiTokenSecretRef:
+              name: {{ include "cluster-issuer.fullname" . }}
+              key: token
+{{- end }}

charts/cluster-issuer/templates/external-secret.yaml

@@ -0,0 +1,21 @@
+{{- if .Values.acme.enabled }}
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: {{ include "cluster-issuer.fullname" . }}
+  labels:
+    {{- include "cluster-issuer.labels" . | nindent 4 }}
+spec:
+  refreshInterval: 1h
+  target:
+    name: {{ include "cluster-issuer.fullname" . }}
+    deletionPolicy: Delete
+    creationPolicy: Owner
+  data:
+    - remoteRef:
+        key: {{ required "A valid .Values.acme.externalSecrets.remoteSecretName entry required!" .Values.acme.externalSecrets.remoteSecretName }}
+      secretKey: token
+  secretStoreRef:
+    name: {{ required "A valid .Values.acme.externalSecrets.secretStore.name entry required!" .Values.acme.externalSecrets.secretStore.name }}
+    kind: {{ required "A valid .Values.acme.externalSecrets.secretStore.kind entry required!" .Values.acme.externalSecrets.secretStore.kind }}
+{{- end }}

charts/cluster-issuer/templates/self-signed.yaml

@@ -0,0 +1,10 @@
+{{- if .Values.selfSigned.enabled }}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ include "cluster-issuer.fullname" . }}-self-signed
+  labels:
+    {{- include "cluster-issuer.labels" . | nindent 4 }}
+spec:
+  selfSigned: {}
+{{- end }}

charts/cluster-issuer/values.yaml

@@ -0,0 +1,15 @@
+acme:
+  enabled: true
+
+  email: ""
+  # could be https://acme-staging-v02.api.letsencrypt.org/directory for testing
+  server: "https://acme-v02.api.letsencrypt.org/directory"
+
+  externalSecrets:
+    remoteSecretName: ""
+    secretStore:
+      name: ""
+      kind: ClusterSecretStore
+
+selfSigned:
+  enabled: true