Dynamic ClusterIssuers

applications/web/templates/dynamic-cluster-issuer.yaml

@@ -0,0 +1,19 @@
+{{- if .Values.dynamicClusterIssuer.enabled -}}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-cloudflare-{{ .Values.dynamicClusterIssuer.name }}
+spec:
+  acme:
+    email: {{ .Values.dynamicClusterIssuer.email }}
+    preferredChain: ""
+    privateKeySecretRef:
+      name: letsencrypt-cloudflare-{{ .Values.dynamicClusterIssuer.name }}
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - dns01:
+        cloudflare:
+          apiTokenSecretRef:
+            key: api-token
+            name: {{ .Values.dynamicClusterIssuer.cloudflare.api_token_secret }}
+{{- end }}

applications/web/values.yaml

@@ -75,6 +75,17 @@ multipleWildcardIngress:
   rewriteCustomPathsEnabled: true
   annotations: {}
 
+# This section is meant for scenarios where nested wildcards are necessary
+# Enabling this will allow for creating ClusterIssuers for this specific wildcard
+# It will always be disabled by default
+dynamicClusterIssuer:
+  enabled: false
+  name:
+  email:
+  # At the moment we only support Cloudflare
+  cloudflare:
+    api_token_secret: 
+
 albIngress:
   enabled: false
   external_dns: false