# Flux Kustomization for cert-manager
# Separate from main homeprod because cert-manager CRDs must be installed
# before ClusterIssuer resources can be applied
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: cert-manager
  namespace: flux-system
spec:
  interval: 10m
  sourceRef:
    kind: GitRepository
    name: homeprod
  path: ./kubernetes/system/cert-manager
  decryption:
    provider: sops
    secretRef:
      name: flux-sops
  healthChecks:
    - apiVersion: apps/v1
      kind: Deployment
      name: cert-manager
      namespace: cert-manager
    - apiVersion: apps/v1
      kind: Deployment
      name: cert-manager-webhook
      namespace: cert-manager
    - apiVersion: apps/v1
      kind: Deployment
      name: cert-manager-cainjector
      namespace: cert-manager