From cc7ad9af8bfd2879f609165305353e95f9faf08b Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 8 Apr 2026 14:32:59 +0300
Subject: [PATCH] add cert manager

---
 .../cert-manager/base/helmrelease.yaml        | 25 +++++++++++++++++++
 .../cert-manager/base/kustomization.yaml      |  6 +++++
 .../cert-manager/base/namespace.yaml          |  6 +++++
 .../cert-manager/kustomization.yaml           |  4 +++
 infrastructure/kustomization.yaml             |  1 +
 5 files changed, 42 insertions(+)
 create mode 100644 infrastructure/cert-manager/base/helmrelease.yaml
 create mode 100644 infrastructure/cert-manager/base/kustomization.yaml
 create mode 100644 infrastructure/cert-manager/base/namespace.yaml
 create mode 100644 infrastructure/cert-manager/kustomization.yaml

diff --git a/infrastructure/cert-manager/base/helmrelease.yaml b/infrastructure/cert-manager/base/helmrelease.yaml
new file mode 100644
index 0000000..a3ba444
--- /dev/null
+++ b/infrastructure/cert-manager/base/helmrelease.yaml
@@ -0,0 +1,25 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: cert-manager-infra
+      version: "1.18.2"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    crds:
+      enabled: true
\ No newline at end of file
diff --git a/infrastructure/cert-manager/base/kustomization.yaml b/infrastructure/cert-manager/base/kustomization.yaml
new file mode 100644
index 0000000..69a5e51
--- /dev/null
+++ b/infrastructure/cert-manager/base/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: cert-manager
+resources:
+  - namespace.yaml
+  - helmrelease.yaml
\ No newline at end of file
diff --git a/infrastructure/cert-manager/base/namespace.yaml b/infrastructure/cert-manager/base/namespace.yaml
new file mode 100644
index 0000000..431004d
--- /dev/null
+++ b/infrastructure/cert-manager/base/namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
+  labels:
+    istio-injection: enabled
\ No newline at end of file
diff --git a/infrastructure/cert-manager/kustomization.yaml b/infrastructure/cert-manager/kustomization.yaml
new file mode 100644
index 0000000..65c9ea5
--- /dev/null
+++ b/infrastructure/cert-manager/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./base
\ No newline at end of file
diff --git a/infrastructure/kustomization.yaml b/infrastructure/kustomization.yaml
index 7a4cc0d..9c7a301 100644
--- a/infrastructure/kustomization.yaml
+++ b/infrastructure/kustomization.yaml
@@ -3,3 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - example-infra
+  - cert-manager