Merge pull request #131 from iits-consulting/chore/certmanager-update

Updates Cert-Manager to 1.15.3

charts/cert-manager/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.14.5
+  version: v1.15.3
 - name: cert-manager-webhook-opentelekomcloud
   repository: https://iits-consulting.github.io/cert-manager-webhook-opentelekomcloud
   version: 0.1.4
-digest: sha256:0bd0d52c133978ab83c4da94ecdcc463c2fae0e3662b50e0b1677475e2c63f12
-generated: "2024-04-29T19:52:09.505265+02:00"
+digest: sha256:eaf5ae7764b3318d9ff7b567e9dca0be90fc2e17a7af3001e142315a6bfca80e
+generated: "2024-09-09T12:52:57.638972+02:00"

charts/cert-manager/Chart.yaml

@@ -2,11 +2,11 @@ apiVersion: v2
 dependencies:
   - name: cert-manager
     repository: https://charts.jetstack.io
-    version: 1.14.5
+    version: v1.15.3
   - name: cert-manager-webhook-opentelekomcloud
     repository: https://iits-consulting.github.io/cert-manager-webhook-opentelekomcloud
     version: v0.1.4
     condition: clusterIssuers.otcDNS.enabled
 name: cert-manager
 description: Wrapper chart for cert-manager. Deploys a ClusterIssuer resource to bootstrap Let's encrypt cert generation
-version: 1.14.5
+version: 1.15.3

charts/cert-manager/README.md

@@ -1,22 +1,27 @@
 # cert-manager
 
-![Version: 1.14.5](https://img.shields.io/badge/Version-1.14.5-informational?style=flat-square)
+![Version: 1.15.3](https://img.shields.io/badge/Version-1.15.3-informational?style=flat-square)
 
 Wrapper chart for cert-manager. Deploys a ClusterIssuer resource to bootstrap Let's encrypt cert generation
 
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://charts.jetstack.io | cert-manager | 1.14.5 |
+| https://charts.jetstack.io | cert-manager | v1.15.3 |
 | https://iits-consulting.github.io/cert-manager-webhook-opentelekomcloud | cert-manager-webhook-opentelekomcloud | v0.1.4 |
 
 ## Values
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | cert-manager-webhook-opentelekomcloud.groupName | string | `"acme.opentelekomcloud.com"` |  |
-| cert-manager.extraArgs | string | `nil` |  |
+| cert-manager.cainjector.extraArgs[0] | string | `"--logging-format=json"` |  |
+| cert-manager.extraArgs[0] | string | `"--logging-format=json"` |  |
+| cert-manager.prometheus.enabled | bool | `true` |  |
+| cert-manager.prometheus.servicemonitor.enabled | bool | `true` |  |
+| cert-manager.startupapicheck.extraArgs[0] | string | `"--logging-format=json"` |  |
+| cert-manager.webhook.extraArgs[0] | string | `"--logging-format=json"` |  |
 | clusterIssuers.email | string | `nil` | Required, replace with the e-mails you want to receive the warnings You must replace this email address with your own. Let's Encrypt will use this to contact you about expiring certificates, and issues related to your account. |
 | clusterIssuers.http.enabled | bool | `true` |  |
 | clusterIssuers.http.ingressClass | string | `"traefik"` |  |

charts/cert-manager/templates/policy-exclusion.yaml

@@ -4,6 +4,9 @@ apiVersion: kyverno.io/v2
 kind: PolicyException
 metadata:
   name: cert-manager-webhook
+  annotations:
+    "helm.sh/hook": pre-install,pre-upgrade
+    "helm.sh/hook-weight": "-5"
 spec:
   exceptions:
     - policyName: restrict-seccomp-strict
@@ -27,6 +30,6 @@ spec:
           names:
             - '*cert-manager-webhook-opentelekomcloud*'
           namespaces:
-            - cert-manager
+            - {{ $.Release.Namespace }}
 {{- end }}
 {{- end }}

charts/cert-manager/values.yaml

@@ -1,5 +1,23 @@
 cert-manager:
   extraArgs:
+    - --logging-format=json
+
+  cainjector:
+    extraArgs:
+      - --logging-format=json
+
+  webhook:
+    extraArgs:
+      - --logging-format=json
+
+  startupapicheck:
+    extraArgs:
+      - --logging-format=json
+
+  prometheus:
+    enabled: true
+    servicemonitor:
+      enabled: true
 
 
 cert-manager-webhook-opentelekomcloud: