change to latest cert-manager + crds

infrastructure/configs/cluster-issuers.yaml

@@ -5,13 +5,17 @@ metadata:
   name: letsencrypt
 spec:
   acme:
-    # Replace the email address with your own contact email
-    email: [email protected]
-    # The server is replaced in /clusters/production/infrastructure.yaml
     server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: [email protected]
     privateKeySecretRef:
-      name: letsencrypt-nginx
+      name: letsencrypt
     solvers:
-      - http01:
-          ingress:
-            class: nginx
+      - dns01:
+          cloudflare:
+            email: [email protected]
+            apiTokenSecretRef:
+              name: cf-token-secret
+              key: cf-token
+        selector:
+          dnsZones:
+            - "reinthal.cc"

infrastructure/configs/kustomization.yaml

@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - cluster-issuers.yaml
+  #  - cluster-issuers.yaml
   - allow-ingress-sealed-secrets.yaml

infrastructure/controllers/cert-manager.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     toolkit.fluxcd.io/tenant: sre-team
 ---
-apiVersion: source.toolkit.fluxcd.io/v1
+apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
 metadata:
   name: cert-manager
@@ -15,21 +15,23 @@ spec:
   interval: 24h
   url: https://charts.jetstack.io
 ---
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: cert-manager
   namespace: cert-manager
 spec:
-  interval: 30m
+  interval: 5m
   chart:
     spec:
       chart: cert-manager
-      version: "1.x"
+      version: 'v1.15.3'
       sourceRef:
         kind: HelmRepository
         name: cert-manager
         namespace: cert-manager
-      interval: 12h
+      interval: 1m
   values:
     installCRDs: true
+    replicaCount: 3
+