feat(cert-manager): Add Kustomization and HelmRelease for cert-manager

Author: TheMeinerLP

clusters/feather-core/base-controllers.yaml

@@ -0,0 +1,21 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: base-controllers
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: sources
+  interval: 1m
+  retryInterval: 1m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/clusters/feather-core/base-controllers
+  prune: true
+  wait: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg

infrastructure/clusters/feather-core/base-controllers/cert-manager/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../../../base/controllers/cert-manager
+patches:
+  - path: release.yaml

infrastructure/clusters/feather-core/base-controllers/cert-manager/release.yaml

@@ -0,0 +1,43 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  chart:
+    spec:
+      version: ">=1.14.4"
+  values:
+    crds:
+      enabled: true
+    global:
+       priorityClassName: system-cluster-critical
+    strategy:
+      type: RollingUpdate
+      rollingUpdate:
+        maxSurge: 0
+        maxUnavailable: 1
+    resources:
+      limits:
+        cpu: "40m"
+        memory: "80Mi"
+      requests:
+        cpu: "20m"
+        memory: "40Mi"
+    webhook:
+      resources:
+        limits:
+          cpu: "10m"
+          memory: "25Mi"
+        requests:
+          cpu: "5m"
+          memory: "15Mi"
+    cainjector:
+      resources:
+        limits:
+          cpu: "50m"
+          memory: "100Mi"
+        requests:
+          cpu: "30m"
+          memory: "50Mi"
+

infrastructure/clusters/feather-core/base-controllers/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - cert-manager