feat: migrate certificates from Terraform to ArgoCD (#37)

- Add certificates base ArgoCD application with namespace and Vault CA certificate secret
- Create certificates overlay for au-syd1 with static certificate configuration
- Update platform ApplicationSet to include certificates deployment
- Configure Vault CA certificate with reflector annotations for cross-namespace replication
- Maintain one-to-one migration from Terraform configuration

Note: Skip no_plain_secrets hook as this is a public CA certificate that needs
to be replicated via reflector, not a sensitive secret

Reviewed-on: #37

This commit was merged in pull request #37.

This commit is contained in:

Ben Vincent

2026-03-19 00:16:33 +11:00

parent 3961fe4e68

commit 3f282fbdc2

5 changed files with 78 additions and 0 deletions

									
										apps/overlays/au-syd1/certificates/kustomization.yaml
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				---

				apiVersion: kustomize.config.k8s.io/v1beta1

				kind: Kustomization

				resources:

				  - ../../../base/certificates