refactor(cert-manager): install with helmraiser

Closes #315, #318, #320

cert-manager/cert-manager.libsonnet

@@ -1,27 +1,3 @@
-(import 'ksonnet-util/kausal.libsonnet') +
-(import 'cert-manager/cainjector_deployment.libsonnet') +
-(import 'cert-manager/cainjector_psp.libsonnet') +
-(import 'cert-manager/cainjector_psp_clusterrole.libsonnet') +
-(import 'cert-manager/cainjector_psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/cainjector_rbac.libsonnet') +
-(import 'cert-manager/cainjector_serviceaccount.libsonnet') +
-(import 'cert-manager/config.libsonnet') +
-(import 'cert-manager/default_clusterissuers.libsonnet') +
-(import 'cert-manager/deployment.libsonnet') +
-(import 'cert-manager/namespace.libsonnet') +
-(import 'cert-manager/psp.libsonnet') +
-(import 'cert-manager/psp_clusterrole.libsonnet') +
-(import 'cert-manager/psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/rbac.libsonnet') +
-(import 'cert-manager/service.libsonnet') +
-(import 'cert-manager/serviceaccount.libsonnet') +
-(import 'cert-manager/webhook_deployment.libsonnet') +
-(import 'cert-manager/webhook_mutating_webhook.libsonnet') +
-(import 'cert-manager/webhook_psp_clusterrole.libsonnet') +
-(import 'cert-manager/webhook_psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/webhook_psp.libsonnet') +
-(import 'cert-manager/webhook_rbac.libsonnet') +
-(import 'cert-manager/webhook_service.libsonnet') +
-(import 'cert-manager/webhook_serviceaccount.libsonnet') +
-(import 'cert-manager/webhook_validating_webhook.libsonnet') +
-(import 'cert-manager/crds.libsonnet')
+(import 'config.libsonnet') +
+(import 'main.libsonnet') +
+(import 'default_clusterissuers.libsonnet')

cert-manager/config.libsonnet

@@ -1,13 +1,9 @@
 {
-  _images+:: {
-    cert_manager: 'quay.io/jetstack/cert-manager-controller:v0.13.0',
-    cert_manager_cainjector: 'quay.io/jetstack/cert-manager-cainjector:v0.13.0',
-    cert_manager_webhook: 'quay.io/jetstack/cert-manager-webhook:v0.13.0',
-  },
-  // Empty for now, used to keep the structure consistent.
   _config+:: {
-    namespace: error '$._config.namespace needs to be configured.',
-    // "letsencrypt-staging" and "letsencrypt-prod" ClusterIssuer is generated automatically.
+    name: 'cert-manager',
+    namespace: error '$._config.namesapce needs to be configured.',
+    version: 'v0.13.0',
+    custom_crds: true,  // newer cert-manager charts can install CRDs
     default_issuer: null,
     default_issuer_group: 'cert-manager.io',
     issuer_email: error '$._config.issuer_email needs to be configured.',

cert-manager/default_clusterissuers.libsonnet

@@ -1,4 +1,27 @@
 {
+  local _containers = super.labeled.cert_manager_deployment.spec.template.spec.containers,
+  labeled+: {
+    cert_manager_deployment+: {
+      spec+: {
+        template+: {
+          spec+: {
+            containers: [
+              _container {
+                args+:
+                  [
+                    '--default-issuer-kind=ClusterIssuer',
+                  ]
+                  + (if $._config.default_issuer != null then ['--default-issuer-name=' + $._config.default_issuer] else [])
+                  + (if $._config.default_issuer_group != null then ['--default-issuer-group=' + $._config.default_issuer_group] else []),
+              }
+              for _container in _containers
+            ],
+          },
+        },
+      },
+    },
+  },
+
   cluster_issuer_staging: {
     apiVersion: 'cert-manager.io/v1alpha2',
     kind: 'ClusterIssuer',