update

infra/cert-manager/templates/letsencrypt.yaml

@@ -1,16 +1,16 @@
-#apiVersion: cert-manager.io/v1
-#kind: ClusterIssuer
-#metadata:
-#  name: letsencrypt-production
-#spec:
-#  acme:
-#    server: https://acme-v02.api.letsencrypt.org/directory
-#    privateKeySecretRef:
-#      name: letsencrypt-production
-#    solvers:
-#    - dns01:
-#        cloudflare:
-#          email: developerdurp@durp.info
-#          apiTokenSecretRef:
-#            name: cloudflare-api-token-secret
-#            key: cloudflare-api-token-secret
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-production
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-production
+    solvers:
+    - dns01:
+        cloudflare:
+          email: developerdurp@durp.info
+          apiTokenSecretRef:
+            name: cloudflare-api-token-secret
+            key: cloudflare-api-token-secret

infra/cert-manager/values.yaml

@@ -5,7 +5,6 @@ cert-manager:
     registry: registry.internal.durp.info
     repository: jetstack/cert-manager-controller
     pullPolicy: Always
-  installCRDs: true
   replicaCount: 3
   extraArgs:
     - --dns01-recursive-nameservers=1.1.1.1:53,1.0.0.1:53

infra/vault/templates/secret-store.yaml

@@ -14,22 +14,3 @@ spec:
           role: "external-secrets"
           serviceAccountRef:
             name: "vault"
-
---- 
-
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: cloudflare-api-token-secret
-spec:
-  secretStoreRef:
-    name: vault
-    kind: ClusterSecretStore
-  target:
-    name: cloudflare-api-token-secret
-  data:
-  - secretKey: cloudflare-api-token-secret
-    remoteRef:
-      key: kv/cert-manager
-      property: cloudflare-api-token-secret
-