enable ingress cert

cluster/cert-manager/cert-patches.yaml

@@ -1 +0,0 @@
- 

cluster/cert-manager/templates/certs/api-server.yaml

@@ -0,0 +1,30 @@
+{{- if and .Values.le.prod.enabled .Values.le.apiCert.enabled -}}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: okd-api
+  namespace: openshift-config
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  dnsNames:
+  - api.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: le-prod
+  secretName: okd-api
+---
+apiVersion: config.openshift.io/v1
+kind: APIServer
+metadata:
+  name: cluster
+spec:
+  servingCerts:
+    namedCertificates:
+    - names:
+      - api.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+      servingCertificate:
+        name: okd-api
+{{- end }}

cluster/cert-manager/templates/certs/router.yaml

@@ -0,0 +1,29 @@
+{{- if and .Values.le.prod.enabled .Values.le.routerCert.enabled -}}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: router-cert
+  namespace: openshift-ingress
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  commonName: apps.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+  dnsNames:
+  - apps.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+  - "*.apps.{{ .Values.cluster_name }}.{{ .Values.base_domain }}"
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: le-prod
+  secretName: router-cert
+---
+apiVersion: operator.openshift.io/v1
+kind: IngressController
+metadata:
+  name: default
+  namespace: openshift-ingress-operator
+spec:
+  defaultCertificate:
+    name: router-cert
+{{- end }}

cluster/cert-manager/values-hub.yaml

@@ -24,7 +24,6 @@ ca:
     <actual key>
     -----END PRIVATE KEY-----
 
-
 le:
   prod:
     enabled: true
@@ -35,7 +34,7 @@ le:
   apiCert:
     enabled: false
   routerCert:
-    enabled: false
+    enabled: true
   preferredChain: ""
   email: ryan.blundon@protonmail.com
   solvers:
@@ -56,4 +55,4 @@ le:
   #     secret-access-key: <actual secret access key>
 
 cluster_name: hub
-base_domain: mklabs.cloud
+base_domain: int.mk-labs.cloud