added cert-manager-cf config (base)

.envs/.cloudflare.template

@@ -0,0 +1,2 @@
+CF_API_TOKEN=
+CF_API_KEY=

.gitignore

@@ -0,0 +1,2 @@
+.envs/.*
+!.envs/.*.template

kustomization.yaml

@@ -4,6 +4,15 @@ kind: Kustomization
 resources:
 - ./kustomize/metallb.yaml
 - ./kustomize/csi-driver-nfs.yaml
+- ./kustomize/cert-manager-cloudflare.yaml
+
+secretGenerator:
+  - name: cert-manager-cloudflare
+    envs:
+      - .envs/.cloudflare
+
+configurations:
+  - ./kustomizeconfig/clusterIssuer.yaml
 
 labels:
 - includeSelectors: true

kustomize/cert-manager-cloudflare.yaml

@@ -0,0 +1,20 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: cloudflare-issuer
+spec:
+  acme:
+    email: kropikuba@gmail.com
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: cloudflare-issuer-account-key
+    solvers:
+      - dns01:
+          cloudflare:
+            email: kropikuba@gmail.com
+            apiTokenSecretRef:
+              name: cert-manager-cloudflare
+              key: CF_API_TOKEN
+            apiKeySecretRef:
+              name: cert-manager-cloudflare
+              key: CF_API_KEY

kustomizeconfig/clusterIssuer.yaml

@@ -0,0 +1,7 @@
+nameReference:
+  - kind: Secret
+    fieldSpecs:
+      - kind: Issuer
+        path: spec/acme/solvers/dns01/cloudflare/apiTokenSecretRef/name
+      - kind: Issuer
+        path: spec/acme/solvers/dns01/cloudflare/apiKeySecretRef/name