From 816fc1add6f031477d49d2c390fa1b0508f68fef Mon Sep 17 00:00:00 2001
From: Juriba Alsiari <59488534+JuribaDev@users.noreply.github.com>
Date: Thu, 29 Aug 2024 14:51:24 +0300
Subject: [PATCH] Update cd.yml

---
 .github/workflows/cd.yml | 25 ++++++++-----------------
 k8s/cluster-issuer.yaml  | 14 ++++++++++++++
 2 files changed, 22 insertions(+), 17 deletions(-)
 create mode 100644 k8s/cluster-issuer.yaml

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index b0c383a..b0eab07 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -104,25 +104,16 @@ jobs:
             echo "cert-manager is already installed."
           fi
 
+          sudo chmod 777 k8s/cluster-issuer.yaml
+
           # Create ClusterIssuer if it doesn't exist
           if ! kubectl get clusterissuer letsencrypt-prod &> /dev/null; then
-            cat<<EOF | kubectl apply -f -
-            apiVersion: cert-manager.io/v1
-            kind: ClusterIssuer
-            metadata:
-              name: letsencrypt-prod
-            spec:
-              acme:
-                server: https://acme-v02.api.letsencrypt.org/directory
-                email: ${{ secrets.LETSENCRYPT_EMAIL }}
-                privateKeySecretRef:
-                  name: letsencrypt-prod
-                solvers:
-                - http01:
-                    ingress:
-                      class: nginx
-            EOF
-            
+            sed -i "s|LETSENCRYPT_EMAIL_PLACEHOLDER|${{ secrets.LETSENCRYPT_EMAIL }}|g" k8s/cluster-issuer.yaml
+            kubectl apply -f k8s/cluster-issuer.yaml
+            echo "ClusterIssuer created."
+          else
+            echo "ClusterIssuer already exists."
+          fi
             echo "ClusterIssuer created."
           else
             echo "ClusterIssuer already exists."
diff --git a/k8s/cluster-issuer.yaml b/k8s/cluster-issuer.yaml
new file mode 100644
index 0000000..24425f9
--- /dev/null
+++ b/k8s/cluster-issuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: LETSENCRYPT_EMAIL_PLACEHOLDER
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    solvers:
+      - http01:
+          ingress:
+            class: nginx