Cert-manager-app fixes

helm/cert-manager/charts/cert-manager-giantswarm-clusterissuer/templates/acme-solvers-networkpolicy.yaml

@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .Values.name }}-http01-solvers
+  labels:
+    {{- include "issuerLabels" . | nindent 4 }}
+  annotations:
+    {{- include "issuerAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      acme.cert-manager.io/http01-solver: "true"
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  - {}
+  egress:
+  - {}

helm/cert-manager/charts/cert-manager-giantswarm-clusterissuer/values.yaml

@@ -46,4 +46,4 @@ acme:
       secretAccessKey: ""
   http01:
     enabled: true
-    ingressClassName: nginx
+    ingressClassName: "nginx"

helm/cert-manager/charts/cert-manager-giantswarm-netpol/templates/acme-solvers-ciliumnetworkpolicy.yaml

@@ -0,0 +1,18 @@
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: {{ template "cert-manager.fullname" . }}-clusterissuer-acme-solvers
+  namespace: giantswarm
+  labels:
+    app: {{ template "cert-manager.name" . }}-clusterissuer-acme-solvers
+    app.kubernetes.io/name: {{ template "cert-manager.name" . }}-clusterissuer-acme-solvers
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    {{- include "labels" . | nindent 4 }}
+spec:
+  endpointSelector:
+    matchLabels:
+      acme.cert-manager.io/http01-solver: "true"
+  ingress:
+  - {}
+  egress:
+  - {}