add cert manager

services/cert-manager/README.md

@@ -0,0 +1,94 @@
+# cert-manager
+
+- [cloudflare](#cloudflare)
+- [api secrets](#api-secrets)
+- [Cluster Issuer](#cluster-issuer)
+  - [Staging](#staging)
+    - [Deploy](#deploy)
+    - [Describe](#describe)
+  - [Production](#production)
+    - [Deploy (Production)](#deploy-production)
+    - [Describe (Production)](#describe-production)
+- [helm chart](#helm-chart)
+
+## cloudflare
+
+## api secrets
+
+[cloudflare-api-token.yaml](./cloudflare-api-token.yaml).
+
+```bash
+set -a
+source ./.env
+set +a
+envsubst < ./cloudflare-api-token.yaml \
+| kubectl apply -n kube-system -f -
+```
+
+## Cluster Issuer
+
+### Staging
+
+#### Deploy
+
+[letsencrypt-clusterissuer-staging.yaml](./letsencrypt-clusterissuer-staging.yaml).
+
+```bash
+set -a
+source ./.env
+set +a
+envsubst < ./letsencrypt-clusterissuer-staging.yaml \
+| kubectl apply -n kube-system -f -
+```
+
+#### Describe
+
+```bash
+kubectl describe clusterissuer letsencrypt-staging
+```
+
+### Production
+
+#### Deploy (Production)
+
+[letsencrypt-clusterissuer-prod.yaml](./letsencrypt-clusterissuer-prod.yaml).
+
+```bash
+set -a
+source ./.env
+set +a
+envsubst < ./letsencrypt-clusterissuer-prod.yaml \
+| kubectl apply -n kube-system -f -
+```
+
+```bash
+set -a
+source ./.env
+set +a
+envsubst < ./letsencrypt-clusterissuer-staging.yaml \
+| kubectl apply -n kube-system -f -
+```
+
+#### Describe (Production)
+
+```bash
+kubectl describe clusterissuer letsencrypt-prod
+```
+
+**Force cert refresh:**
+
+``` bash
+kubectl delete certificaterequest -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls
+kubectl delete order  -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls
+```
+
+## helm chart
+
+``` bash
+helm repo add jetstack https://charts.jetstack.io  --force-update  
+helm upgrade --install cert-manager jetstack/cert-manager \
+--namespace kube-system \
+--version=v1.20.2 \
+--create-namespace \
+--set crds.enabled=true
+```