feedc0de/cert-manager-deployment

Fork 0

T

feedc0de 3d36d550c7

Validate and deploy cert-manager configuration / validate (push) Successful in 11s

Details

Validate and deploy cert-manager configuration / deploy (push) Successful in 20s

Details

Introduce CI/CD

2026-09-05 15:42:12 +02:00

.gitea/workflows

Introduce CI/CD

2026-09-05 15:42:12 +02:00

.gitignore

Introduce CI/CD

2026-09-05 15:42:12 +02:00

certificates.yaml

Introduce CI/CD

2026-09-05 15:42:12 +02:00

ci-deployer.yaml

Introduce CI/CD

2026-09-05 15:42:12 +02:00

cloudflare-api-credentials.yaml.example

Introduce CI/CD

2026-09-05 15:42:12 +02:00

cloudflare.yaml

Introduce CI/CD

2026-09-05 15:42:12 +02:00

create-ci-kubeconfig.sh

Introduce CI/CD

2026-09-05 15:42:12 +02:00

http-issuer.yaml

Introduce CI/CD

2026-09-05 15:42:12 +02:00

install.sh

Introduce CI/CD

2026-09-05 15:42:12 +02:00

LICENSE

Initial commit

2026-09-05 15:39:54 +02:00

README.md

Introduce CI/CD

2026-09-05 15:42:12 +02:00

test.sh

Introduce CI/CD

2026-09-05 15:42:12 +02:00

values.yaml

Introduce CI/CD

2026-09-05 15:42:12 +02:00

README.md

cert-manager on Kubernetes

The operator is pinned to chart/app v1.21.1 and remains an administrator upgrade because it owns CRDs, admission webhooks, and cluster-wide RBAC. Gitea Actions validates and deploys only the two exact ClusterIssuers and four exact Certificates; it cannot read Secrets, create/delete resources, or modify the operator.

cloudflare-api-credentials.yaml is intentionally ignored. Copy the .example, insert the existing token, and run ./install.sh; when the file is absent the installer preserves the existing live Secret. Run ./create-ci-kubeconfig.sh once and save only its final line as repository secret KUBE_CONFIG_BASE64.