Revert "change to CertificatePolicy in application-team-1.yaml"

This reverts commit 2c979b8.

Author: Mladen Rusev

hack/e2e/application-team-1.yaml

@@ -1,33 +1,69 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: team-1
+---
 apiVersion: policy.cert-manager.io/v1alpha1
-kind: CertificatePolicy
+kind: CertificateRequestPolicy
 metadata:
-  name: allow-team-1-certs
-  namespace: venafi
+  name: team-1
 spec:
   allowed:
-    commonNames: ["*"]
-    dnsNames: ["*"]
+    commonName:
+      value: '*'
+    dnsNames:
+      values:
+      - '*'
+    subject:
+      countries:
+        values:
+        - '*'
+      localities:
+        values:
+        - '*'
+      organizationalUnits:
+        values:
+        - '*'
+      organizations:
+        values:
+        - '*'
+      postalCodes:
+        values:
+        - '*'
+      provinces:
+        values:
+        - '*'
+      serialNumber:
+        value: '*'
+      streetAddresses:
+        values:
+        - '*'
     usages:
-      - "digital signature"
-      - "key encipherment"
-      - "server auth"
-  issuerSelector:
-    matchNames: ["venafi-cloud"]
-  namespaceSelector:
-    matchNames: ["team-1"]
-
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: team-1
+    - digital signature
+    - key encipherment
+    - server auth
+    - client auth
+  plugins:
+    venafi:
+      values:
+        venafiConnectionName: venafi-components
+        zone: ${VEN_ZONE}
+  selector:
+    issuerRef:
+      group: jetstack.io
+      kind: VenafiIssuer
+      name: venafi-cloud
+    namespace:
+      matchNames:
+      - team-1
 ---
 apiVersion: jetstack.io/v1alpha1
 kind: VenafiIssuer
 metadata:
   name: venafi-cloud
   namespace: team-1
 spec:
+  certificateNameExpression: request.namespace + "_" + request.name
   venafiConnectionName: venafi-components
   venafiConnectionNamespace: venafi
   zone: ${VEN_ZONE}
@@ -50,4 +86,28 @@ spec:
     rotationPolicy: Always
     size: 2048
   revisionHistoryLimit: 1
-  secretName: app-0
+  secretName: app-0
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cert-manager-policy:allow
+  namespace: team-1
+rules:
+  - apiGroups: ["policy.cert-manager.io"]
+    resources: ["certificaterequestpolicies"]
+    verbs: ["use"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cert-manager-policy:allow
+  namespace: team-1
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: cert-manager-policy:allow
+subjects:
+- kind: Group
+  name: system:authenticated
+  apiGroup: rbac.authorization.k8s.io