KFLUXINFRA-2013: Deploy cert-manager partially on production (#7366)

- Deploy on all production cluster except for p02 and rh01.
- Required for deploying Kueue.

Signed-off-by: Gal Ben Haim <[email protected]>

Author: gbenhaim

argo-cd-apps/base/member/infra-deployments/cert-manager/cert-manager.yaml

@@ -22,18 +22,20 @@ spec:
                   values.clusterDir: stone-stg-rh01
                 - nameNormalized: stone-stage-p01
                   values.clusterDir: stone-stage-p01
-                - nameNormalized: stone-prd-rh01
-                  values.clusterDir: stone-prd-rh01
+                #- nameNormalized: stone-prd-rh01
+                #  values.clusterDir: stone-prd-rh01
                 - nameNormalized: kflux-prd-rh02
                   values.clusterDir: kflux-prd-rh02
                 - nameNormalized: stone-prod-p01
                   values.clusterDir: stone-prod-p01
-                - nameNormalized: stone-prod-p02
-                  values.clusterDir: stone-prod-p02
+                #- nameNormalized: stone-prod-p02
+                #  values.clusterDir: stone-prod-p02
                 - nameNormalized: kflux-ocp-p01
                   values.clusterDir: kflux-ocp-p01
                 - nameNormalized: kflux-prd-rh03
                   values.clusterDir: kflux-prd-rh03
+                - nameNormalized: kflux-osp-p01
+                  values.clusterDir: kflux-osp-p01
   template:
     metadata:
       name: cert-manager-{{nameNormalized}}

argo-cd-apps/overlays/konflux-public-production/delete-applications.yaml

@@ -14,12 +14,6 @@ $patch: delete
 ---
 apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet
-metadata:
-  name: cert-manager
-$patch: delete
----
-apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
 metadata:
   name: kueue
 $patch: delete

argo-cd-apps/overlays/konflux-public-production/kustomization.yaml

@@ -241,3 +241,8 @@ patches:
       kind: ApplicationSet
       version: v1alpha1
       name: kubearchive
+  - path: production-overlay-patch.yaml
+    target:
+      kind: ApplicationSet
+      version: v1alpha1
+      name: cert-manager

argo-cd-apps/overlays/production-downstream/delete-applications.yaml

@@ -32,12 +32,6 @@ $patch: delete
 ---
 apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet
-metadata:
-  name: cert-manager
-$patch: delete
----
-apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
 metadata:
   name: kueue
 $patch: delete

argo-cd-apps/overlays/production-downstream/kustomization.yaml

@@ -257,3 +257,8 @@ patches:
       kind: ApplicationSet
       version: v1alpha1
       name: monitoring-workload-kanary
+  - path: production-overlay-patch.yaml
+    target:
+      kind: ApplicationSet
+      version: v1alpha1
+      name: cert-manager

components/cert-manager/production/base/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- operator.yaml
+
+namespace: cert-manager-operator

components/cert-manager/production/base/operator.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: operators.coreos.com/v1
+kind: OperatorGroup
+metadata:
+  name: openshift-cert-manager-operator
+  annotations:
+    argocd.argoproj.io/sync-wave: "-2"
+spec:
+  upgradeStrategy: Default
+---
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: openshift-cert-manager-operator
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  channel: stable-v1
+  name: openshift-cert-manager-operator
+  source: redhat-operators
+  sourceNamespace: openshift-marketplace
+  installPlanApproval: Automatic

components/cert-manager/production/empty-base/.gitempty

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../base

components/cert-manager/production/kflux-ocp-p01/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../base