enable ingress cert

cluster/temp/overlays/hub/api-ingress.yaml

@@ -0,0 +1,41 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  annotations:
+  generation: 1
+  name: letsencrypt
+  namespace: openshift-ingress
+spec:
+  commonName: '*.apps.hub.int.mk-labs.cloud'
+  dnsNames:
+  - '*.apps.hub.int.mk-labs.cloud'
+  duration: 2160h0m0s
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  renewBefore: 360h0m0s
+  secretName: letsencrypt
+  usages:
+  - server auth
+  - client auth
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  annotations:
+  name: letsencrypt
+  namespace: openshift-config
+spec:
+  commonName: 'api.hub.int.mk-labs.cloud'
+  dnsNames:
+  - api.hub.int.mk-labs.cloud
+  duration: 2160h0m0s
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  renewBefore: 360h0m0s
+  secretName: letsencrypt
+  usages:
+  - server auth
+  - client auth

cluster/temp/overlays/hub/apiserver-cert-config.yaml

@@ -0,0 +1,11 @@
+apiVersion: config.openshift.io/v1
+kind: APIServer
+metadata:
+  name: cluster
+spec:
+  servingCerts:
+    namedCertificates:
+    - names:
+      - api.hub.int.mk-labs.cloud
+      servingCertificate:
+        name: letsencrypt

cluster/temp/overlays/hub/ingress-controller-cert-config.yaml

@@ -0,0 +1,8 @@
+apiVersion: operator.openshift.io/v1
+kind: IngressController
+metadata:
+  name: default
+  namespace: openshift-ingress-operator
+spec:
+  defaultCertificate:
+    name: letsencrypt

cluster/temp/overlays/hub/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonAnnotations:
+  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+
+resources:
+- ../../base
+#- api-ingress.yaml
+#- apiserver-cert-config.yaml
+#- ingress-controller-cert-config.yaml