FEAT(cert-manager): integrate cert-manager

- Add cert-manager configuration
- Enable TLS certificate management

cert-manager/argocd-issuers.yaml

@@ -1,38 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cert-manager-issuers
-  namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
-    targetRevision: main
-    path: cert-manager
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: cert-manager
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-
-    syncOptions:
-      - CreateNamespace=false
-      - PrunePropagationPolicy=foreground
-
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
-
-  revisionHistoryLimit: 10
-

cert-manager/argocd.yaml

@@ -9,17 +9,18 @@ spec:
   project: default
 
   sources:
-    # Helm chart from Jetstack repository
     - repoURL: https://charts.jetstack.io
       chart: cert-manager
       targetRevision: v1.16.2
       helm:
         valueFiles:
           - $values/cert-manager/helm-values.yaml
-    # Values file from Git repository
     - repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
       targetRevision: main
       ref: values
+    - repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
+      targetRevision: main
+      path: cert-manager
 
   destination:
     server: https://kubernetes.default.svc

cert-manager/cluster-issuer-staging.yaml

@@ -1,22 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-staging
-spec:
-  acme:
-    # Let's Encrypt Staging 서버 (테스트용)
-    # Rate limit이 없어서 테스트할 때 사용
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
-
-    # 인증서 만료 알림을 받을 이메일 주소
-    email: bluemayne0213@icloud.com
-
-    # ACME 계정의 private key를 저장할 Secret 이름
-    privateKeySecretRef:
-      name: letsencrypt-staging
-
-    # HTTP-01 challenge를 사용하여 도메인 소유권 검증
-    solvers:
-    - http01:
-        ingress:
-          class: haproxy

cert-manager/kustomization.yaml

@@ -2,9 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  # argocd.yaml files은 수동으로 관리 (순환 참조 방지)
-  # - argocd-certmanager.yaml
-  # - argocd-issuers.yaml
   - namespace.yaml
-  - cluster-issuer-prod.yaml
+  - cluster-issuer.yaml
-  - cluster-issuer-staging.yaml