feat: add helmraiser & a generated cert-manager lib from the chart

cert-manager/cert-manager.libsonnet

@@ -1,27 +1,3 @@
-(import 'ksonnet-util/kausal.libsonnet') +
-(import 'cert-manager/cainjector_deployment.libsonnet') +
-(import 'cert-manager/cainjector_psp.libsonnet') +
-(import 'cert-manager/cainjector_psp_clusterrole.libsonnet') +
-(import 'cert-manager/cainjector_psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/cainjector_rbac.libsonnet') +
-(import 'cert-manager/cainjector_serviceaccount.libsonnet') +
 (import 'cert-manager/config.libsonnet') +
-(import 'cert-manager/default_clusterissuers.libsonnet') +
-(import 'cert-manager/deployment.libsonnet') +
-(import 'cert-manager/namespace.libsonnet') +
-(import 'cert-manager/psp.libsonnet') +
-(import 'cert-manager/psp_clusterrole.libsonnet') +
-(import 'cert-manager/psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/rbac.libsonnet') +
-(import 'cert-manager/service.libsonnet') +
-(import 'cert-manager/serviceaccount.libsonnet') +
-(import 'cert-manager/webhook_deployment.libsonnet') +
-(import 'cert-manager/webhook_mutating_webhook.libsonnet') +
-(import 'cert-manager/webhook_psp_clusterrole.libsonnet') +
-(import 'cert-manager/webhook_psp_clusterrolebinding.libsonnet') +
-(import 'cert-manager/webhook_psp.libsonnet') +
-(import 'cert-manager/webhook_rbac.libsonnet') +
-(import 'cert-manager/webhook_service.libsonnet') +
-(import 'cert-manager/webhook_serviceaccount.libsonnet') +
-(import 'cert-manager/webhook_validating_webhook.libsonnet') +
-(import 'cert-manager/crds.libsonnet')
+(import 'cert-manager/main.libsonnet') +
+(import 'cert-manager/default_clusterissuers.libsonnet')

cert-manager/config.libsonnet

@@ -1,12 +1,9 @@
 {
-  _images+:: {
-    cert_manager: 'quay.io/jetstack/cert-manager-controller:v0.13.0',
-    cert_manager_cainjector: 'quay.io/jetstack/cert-manager-cainjector:v0.13.0',
-    cert_manager_webhook: 'quay.io/jetstack/cert-manager-webhook:v0.13.0',
-  },
-  // Empty for now, used to keep the structure consistent.
   _config+:: {
-    namespace: error '$._config.namespace needs to be configured.',
+    name: 'cert-manager',
+    namespace: error '$._config.namespace needs to be configured',
+    chartPrefix: 'cert-manager',
+
     // "letsencrypt-staging" and "letsencrypt-prod" ClusterIssuer is generated automatically.
     default_issuer: null,
     default_issuer_group: 'cert-manager.io',

cert-manager/default_clusterissuers.libsonnet

@@ -1,4 +1,31 @@
 {
+  local _containers = super.controller.deployment.cert_manager.deployment.spec.template.spec.containers,
+  controller+: {
+    deployment+: {
+      cert_manager+: {
+        deployment+: {
+          spec+: {
+            template+: {
+              spec+: {
+                containers: [
+                  _container {
+                    args+:
+                      [
+                        '--default-issuer-kind=ClusterIssuer',
+                      ]
+                      + (if $._config.default_issuer != null then ['--default-issuer-name=' + $._config.default_issuer] else [])
+                      + (if $._config.default_issuer_group != null then ['--default-issuer-group=' + $._config.default_issuer_group] else []),
+                  }
+                  for _container in _containers
+                ],
+              },
+            },
+          },
+        },
+      },
+    },
+  },
+
   cluster_issuer_staging: {
     apiVersion: 'cert-manager.io/v1alpha2',
     kind: 'ClusterIssuer',