From e6d638e0950cb83b87fe93b626023c206b9d1274 Mon Sep 17 00:00:00 2001
From: Vassiliy Yegorov <va@egorovanet.ru>
Date: Wed, 25 Jun 2025 12:37:20 +0700
Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=20=D1=80=D0=B5=D1=81=D1=83=D1=80=D1=81=20jetstack.yaml?=
 =?UTF-8?q?=20=D0=B8=20cert-manager.yaml=20=D0=B2=20=D0=BA=D0=BE=D0=BD?=
 =?UTF-8?q?=D1=84=D0=B8=D0=B3=D1=83=D1=80=D0=B0=D1=86=D0=B8=D1=8E=20kustom?=
 =?UTF-8?q?ization.yaml.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../t8s-demo/install/cert-manager.yaml        | 29 +++++++++++++++++++
 .../clusters/t8s-demo/kustomization.yaml      |  2 ++
 talos-k8s-flux/soft/jetstack.yaml             |  9 ++++++
 3 files changed, 40 insertions(+)
 create mode 100644 talos-k8s-flux/clusters/t8s-demo/install/cert-manager.yaml
 create mode 100644 talos-k8s-flux/soft/jetstack.yaml

diff --git a/talos-k8s-flux/clusters/t8s-demo/install/cert-manager.yaml b/talos-k8s-flux/clusters/t8s-demo/install/cert-manager.yaml
new file mode 100644
index 0000000..db49f18
--- /dev/null
+++ b/talos-k8s-flux/clusters/t8s-demo/install/cert-manager.yaml
@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
+  labels:
+    app.kubernetes.io/component: cert-manager
+    pod-security.kubernetes.io/enforce: privileged
+---
+
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: flux-system
+spec:
+  interval: 1h
+  targetNamespace: cert-manager
+  chart:
+    spec:
+      chart: cert-manager
+      version: v1.18.0
+      sourceRef:
+        kind: HelmRepository
+        name: jetstack-repo
+        namespace: flux-system
+      interval: 60m
+  values:
+    crds:
+      enabled: true
diff --git a/talos-k8s-flux/clusters/t8s-demo/kustomization.yaml b/talos-k8s-flux/clusters/t8s-demo/kustomization.yaml
index 16bfe5a..06ca11d 100644
--- a/talos-k8s-flux/clusters/t8s-demo/kustomization.yaml
+++ b/talos-k8s-flux/clusters/t8s-demo/kustomization.yaml
@@ -4,6 +4,7 @@ resources:
 - gotk-components.yaml
 - gotk-sync.yaml
 
+- ../../soft/jetstack.yaml
 - ../../soft/piraeus.yaml
 - ../../soft/cpng.yaml
 - ../../soft/ingress-nginx.yaml
@@ -20,6 +21,7 @@ resources:
 
 # - install/piraeus.yaml
 # - install/nfs-provisioner.yaml
+- install/cert-manager.yaml
 - install/ingress-nginx.yaml
 - install/metrics-server.yaml
 # - install/monitoring.yaml
diff --git a/talos-k8s-flux/soft/jetstack.yaml b/talos-k8s-flux/soft/jetstack.yaml
new file mode 100644
index 0000000..4730b75
--- /dev/null
+++ b/talos-k8s-flux/soft/jetstack.yaml
@@ -0,0 +1,9 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: jetstack-repo
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.jetstack.io
+---