feat: add cert manager

cluster/base/infra/cert-manager.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-cert-manager
+  namespace: flux-system
+spec:
+  interval: 1h0m0s
+  path: ./infra/controllers/cert-manager
+  dependsOn:
+  - name: infra-namespaces
+  prune: true
+  retryInterval: 1m0s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  timeout: 5m0s
+  wait: true

infra/controllers/1password/1password.yaml

@@ -25,7 +25,7 @@ spec:
   interval: 1m0s
   values:
     connect:
-      serviceType: LoadBalancer
+      serviceType: ClusterIP
       credentialsName: 1password-credentials
       credentialsKey: password
     operator:

infra/controllers/cert-manager/cert-manager.yaml

@@ -0,0 +1,29 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: jetstack
+  namespace: cert-manager-system
+spec:
+  interval: 15m0s
+  url: https://charts.jetstack.io
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: cert-manager-system
+spec:
+  chart:
+    spec:
+      chart: cert-manager
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: jetstack
+      version: v1.16.1
+  interval: 1m0s
+  values:
+    crds:
+      enabled: true
+      keep: true

infra/namespaces/namespaces.yaml

@@ -23,3 +23,8 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: 1password-system
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager-system