3 Commits

Author	SHA1	Message	Date
Ben Vincent	321192c4c7	Import live vault-issuer ClusterIssuer into GitOps ... The vault-issuer ClusterIssuer is applied out-of-band (Helm) and referenced by ~15 Gateways, but is not tracked in GitOps, causing config drift. - Add apps/base/cert-manager/clusterissuer_vault-issuer.yaml capturing the live spec byte-faithfully (vault.service.consul pki_int/sign/servers_default, k8s auth mount k8s/au/syd1, role cert_manager_issuer, SA cert-manager-vault-issuer, caBundleSecretRef vault-ca-cert). - Register the manifest in the cert-manager base kustomization. Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT	2026-08-02 17:19:21 +10:00
unkinben	8c9eb9befc	cert-manager: scrape metrics (follow-up to #239) (#241) ... Follow-up to #239. Adds a `VMServiceScrape` for cert-manager's existing webhook (`metrics` :9402) and cainjector (`http-metrics` :9402) services so the observability VMAgent collects them. No chart change needed. (The controller's own metrics need `prometheus.enabled` in the chart to expose a metrics service — separate follow-up.) Reviewed-on: #241 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>	2026-07-07 00:08:06 +10:00
unkinben	ed300fabed	feat: migrate cert-manager from Terraform to ArgoCD (#42) ... - Add cert-manager base ArgoCD application with namespace, RBAC resources - Create cert-manager overlay for au-syd1 with Helm chart configuration - Update platform ApplicationSet to include cert-manager deployment - Configure cert-manager v1.19.2 with jetstack Helm repository - Maintain one-to-one migration from Terraform configuration Reviewed-on: #42	2026-03-19 01:18:19 +11:00