feat: add Cert-manager

remodel/k8s/README.md

@@ -47,3 +47,15 @@ kubectl kustomize --enable-helm infra/storage | kubectl apply -f -
 ```shell
 kubectl kustomize --enable-helm infra/controllers | kubectl apply -f -
 ```
+
+
+# SBOM
+
+* [x] Cilium
+* [] Hubble
+* [x] Argo CD
+* [x] Proxmox CSI Plugin
+* [x] Cert-manager
+* [] Gateway
+* [] CNPG
+* [] Authentication (Keycloak, Authentik, ...)

remodel/k8s/infra/controllers/cert-manager/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ns.yaml
+
+helmCharts:
+  - name: cert-manager
+    repo: https://charts.jetstack.io
+    version: 1.15.1
+    releaseName: cert-manager
+    namespace: cert-manager
+    valuesFile: values.yaml

remodel/k8s/infra/controllers/cert-manager/ns.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager

remodel/k8s/infra/controllers/cert-manager/values.yaml

@@ -0,0 +1,28 @@
+installCRDs: true
+
+extraArgs:
+  - "--enable-gateway-api"
+
+resources:
+  limits:
+    cpu: 100m
+    memory: 128Mi
+  requests:
+    cpu: 10m
+    memory: 64Mi
+webhook:
+  resources:
+    limits:
+      cpu: 100m
+      memory: 64Mi
+    requests:
+      cpu: 10m
+      memory: 32Mi
+cainjector:
+  resources:
+    limits:
+      cpu: 100m
+      memory: 128Mi
+    requests:
+      cpu: 10m
+      memory: 64Mi