feat: add certbot chart dependency

Makefile

@@ -241,6 +241,7 @@ install:
 	helm dep up $(CHART_DIR); \
 	if ! helm status --namespace $(NAMESPACE) $(CHART_INSTANCE); then \
 		echo 'Installing the application and issuing SSL certificate'; \
-		helm install $(HELM_OPTS) $(CHART_INSTANCE) $(CHART_DIR); \
-	fi; \
-	helm upgrade $(HELM_OPTS) $(CHART_INSTANCE) $(CHART_DIR);
+		helm install --set certbot.manualRun=true $(HELM_OPTS) $(CHART_INSTANCE) $(CHART_DIR); \
+	else; \
+		helm upgrade $(HELM_OPTS) $(CHART_INSTANCE) $(CHART_DIR); \
+	fi;

chart/cas-cif/Chart.yaml

@@ -13,3 +13,6 @@ dependencies:
     version: 1.0.7
     repository: https://bcgov.github.io/cas-airflow
     alias: deploy-db
+  - name: certbot
+    version: 0.1.0
+    repository: https://bcdevops.github.io/certbot

chart/cas-cif/values-prod.yaml

@@ -1,8 +1,10 @@
 hostName: cif.gov.bc.ca
 
-caServerSecret: cas-acme-url
-caServerKey: url
-renewalDays: 305
+certbot:
+  certbot:
+    server:
+      secretName: cas-acme-url
+      secretKey: url
 
 deploy-db:
   airflowEndpoint: https://cas-airflow-prod.apps.silver.devops.gov.bc.ca

chart/cas-cif/values.yaml

@@ -31,17 +31,12 @@ db:
   preUpgradeCommand: ~
 
 hostName: ~
-# set to false to deploy the application with an insecure route,
-# and issue an SSL certificate using acme.sh
-sslTermination: true
-objectNamePrefix: cas-cif
+
 port: 3001
-internalPort: 3000
-caServerSecret: ~ # pragma: allowlist secret
-caServerKey: ~
-caAccountEmail: [email protected]
-storageClassName: netapp-file-standard
-renewalDays: 60
+
+certbot:
+  certbot:
+    email: [email protected]
 
 resources:
   limits: