cert-stack

Single-claim install of cert-manager onto a target Kubernetes cluster.

Cloud-neutral. DNS-01 plumbing lives in the corresponding DNS stack:

• aws-dnsstack — composes the Route53 PodIdentity for cert-manager's DNS-01 solver, plus the Let's Encrypt ClusterIssuer.
• cloudflare-dnsstack — wires the Cloudflare API token Secret consumed by cert-manager's Cloudflare DNS-01 solver, plus the Let's Encrypt ClusterIssuer.

Usage

apiVersion: hops.ops.com.ai/v1alpha1
kind: CertStack
metadata:
  name: certs
  namespace: default
spec:
  clusterName: my-cluster

This composes:

• A cert-manager Helm release on the target cluster

Spec Reference

Field	Type	Default	Description
clusterName	string	required	Target cluster name; default for helmProviderConfigRef.name
namespace	string	cert-manager	Namespace for the Helm release
releaseName	string	cert-manager	Helm release name
chartVersion	string	v1.19.2	cert-manager Helm chart version
helmProviderConfigRef.name	string	clusterName	Helm ProviderConfig
helmProviderConfigRef.kind	enum	ProviderConfig	ProviderConfig or ClusterProviderConfig
values	object	—	Helm values merged with chart defaults
overrideAllValues	object	—	Helm values that replace all defaults
managementPolicies	string[]	["*"]	Crossplane management policies
labels	object	—	Custom labels merged with defaults

Composed Resources

Resource	Kind
<releaseName>	helm.m.crossplane.io/Release

Dependencies

Kind	Package	Version
Function	crossplane-contrib/function-auto-ready	^v0
Provider	crossplane-contrib/provider-helm	^v1

Development

make render             # Render all examples
make validate           # Validate against Crossplane schemas
make build              # Build the package

License

Apache-2.0