unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Import live vault-issuer ClusterIssuer into GitOps #328

Merged
benvin merged 1 commits from benvin/vault-issuer-gitops into main 2026-08-02 18:00:00 +10:00
Conversation 0 Commits 1 Files Changed 2
+28

1 Commits

Author SHA1 Message Date
Ben Vincent 321192c4c7 Import live vault-issuer ClusterIssuer into GitOps
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
The vault-issuer ClusterIssuer is applied out-of-band (Helm) and referenced
by ~15 Gateways, but is not tracked in GitOps, causing config drift.

- Add apps/base/cert-manager/clusterissuer_vault-issuer.yaml capturing the
  live spec byte-faithfully (vault.service.consul pki_int/sign/servers_default,
  k8s auth mount k8s/au/syd1, role cert_manager_issuer, SA cert-manager-vault-issuer,
  caBundleSecretRef vault-ca-cert).
- Register the manifest in the cert-manager base kustomization.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
 2026-08-02 17:19:21 +10:00