From f85003863f385628d896e4178052bbaf725b3ec5 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Sun, 16 Feb 2025 02:29:55 +0100
Subject: [PATCH] Move clusterissuer definition to webhook-ovh's values

---
 infra/configs/cluster-issuer.yaml             | 27 -------------------
 .../controllers/cert-manager-webhook-ovh.yaml | 18 +++++++++++++
 infra/kustomization.yaml                      |  1 -
 3 files changed, 18 insertions(+), 28 deletions(-)
 delete mode 100644 infra/configs/cluster-issuer.yaml

diff --git a/infra/configs/cluster-issuer.yaml b/infra/configs/cluster-issuer.yaml
deleted file mode 100644
index e50fcde..0000000
--- a/infra/configs/cluster-issuer.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    email: arek.dzski@gmail.com
-    server: https://acme-v02.api.letsencrypt.org/directory
-    solvers:
-      - dns01:
-          cnameStrategy: None
-          webhook:
-            groupName: lumpiasty-homelab
-            solverName: ovh
-            config:
-              endpoint: ovh-eu
-              applicationKeyRef:
-                name: ovh-credentials
-                key: applicationKey
-              applicationSecretRef:
-                name: ovh-credentials
-                key: applicationSecret
-              consumerKeyRef:
-                name: ovh-credentials
-                key: consumerKey
-    privateKeySecretRef:
-      name: letsencrypt-key
diff --git a/infra/controllers/cert-manager-webhook-ovh.yaml b/infra/controllers/cert-manager-webhook-ovh.yaml
index af15914..9c3fb12 100644
--- a/infra/controllers/cert-manager-webhook-ovh.yaml
+++ b/infra/controllers/cert-manager-webhook-ovh.yaml
@@ -30,3 +30,21 @@ spec:
     certManager:
       namespace: cert-manager
       serviceAccountName: cert-manager
+    issuers:
+      - name: letsencrypt
+        create: true
+        kind: ClusterIssuer
+        cnameStrategy: None
+        acmeServerUrl: https://acme-v02.api.letsencrypt.org/directory
+        email: arek.dzski@gmail.com
+        ovhEndpointName: ovh-eu
+        ovhAuthenticationRef:
+          applicationKeyRef:
+            name: ovh-credentials
+            key: applicationKey
+          applicationSecretRef:
+            name: ovh-credentials
+            key: applicationSecret
+          consumerKeyRef:
+            name: ovh-credentials
+            key: consumerKey
diff --git a/infra/kustomization.yaml b/infra/kustomization.yaml
index 0370679..078f947 100644
--- a/infra/kustomization.yaml
+++ b/infra/kustomization.yaml
@@ -13,7 +13,6 @@ resources:
   - diskpools/zoma-dibaiyin-hdd.yaml
   - configs/bgp-cluster-config.yaml
   - configs/loadbalancer-ippool.yaml
-  - configs/cluster-issuer.yaml
   - configs/single-hdd-sc.yaml
   - configs/mayastor-snapshotclass.yaml
   - configs/openbao-cert.yaml