feat: merge in certificates to support trustee (#11)

Signed-off-by: Chris Butler <[email protected]>

Author: butler54

Chart.yaml

@@ -7,4 +7,4 @@ keywords:
 - confidential-containers
 name: trustee
 # DO NOT EDIT VERSION HERE, IT IS AUTO-GENERATED BY SEMANTIC-RELEASE
-version: 0.0.5
+version: 0.1.0

README.md

@@ -1,6 +1,6 @@
 # trustee
 
-![Version: 0.0.5](https://img.shields.io/badge/Version-0.0.5-informational?style=flat-square)
+![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square)
 
 A Helm chart to provide an opinionated deployment of Trustee in a validated pattern
 

templates/certificate.yaml

@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: kbs-certificate
+  namespace: imperative
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  secretName: kbs-tls-self-signed
+  duration: 8760h # 1 year
+  renewBefore: 720h # 30 days
+  commonName: kbs.{{ .Values.global.hubClusterDomain }}
+  dnsNames:
+  - kbs.{{ .Values.global.hubClusterDomain }}
+  issuerRef:
+    name: kbs-self-signed-issuer
+    kind: Issuer
+

templates/issuer.yaml

@@ -0,0 +1,10 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: kbs-self-signed-issuer
+  namespace: imperative
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  selfSigned: {}
+