add api cert

cluster/cert-manager/values-hub.yaml

@@ -32,7 +32,7 @@ le:
     enabled: true
     server: https://acme-staging-v02.api.letsencrypt.org/directory
   apiCert:
-    enabled: false
+    enabled: true
   routerCert:
     enabled: true
   preferredChain: ""
@@ -49,10 +49,5 @@ le:
     dnsZones:
     - mk-labs.cloud
 
-  # secrets:
-  # - name: le-route53-creds
-  #   stringData:
-  #     secret-access-key: <actual secret access key>
-
 cluster_name: hub
 base_domain: int.mk-labs.cloud

tmp/routercopy.yaml

@@ -0,0 +1,28 @@
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: router-cert
+  namespace: openshift-ingress
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  commonName: apps.hub.mk-labs.cloud
+  dnsNames:
+  - apps.hub.mk-labs.cloud
+  - "*.apps.hub.mk-labs.cloud"
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  secretName: router-cert
+---
+apiVersion: operator.openshift.io/v1
+kind: IngressController
+metadata:
+  name: default
+  namespace: openshift-ingress-operator
+spec:
+  defaultCertificate:
+    name: router-cert