fix(cert-manager): render issuers via kustomization resources list, restore automated sync — directory.include with bare filenames rendered empty (never matched), so ArgoCD tracked 0 resources and prune wiped the CA ConfigMaps + ClusterIssuers

2026-08-12 13:30:46 -07:00
parent f53d54cba9
commit fa239972a7
2 changed files with 19 additions and 6 deletions
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+# Issuers + CA trust-bundle ConfigMaps for the cert-manager-issuers Application.
+# Each resource sets its own metadata.namespace (the ConfigMaps target iam/cicd/
+# monitoring/sqs; ClusterIssuers are cluster-scoped) — so NO namespace transformer
+# here (that would rewrite them all into one namespace). cert-manager itself is a
+# separate Helm Application; cert-manager-values.yaml here is only its $values ref.
+resources:
+  - letsencrypt-issuer.yaml
+  - homelab-ca-issuer.yaml
+  - homelab-ca-configmap.yaml