From ebd2c44d03e779eca82657628de6094840814b35 Mon Sep 17 00:00:00 2001
From: Scott Aubrey <scott@aubrey.org.uk>
Date: Tue, 12 Nov 2024 07:18:06 +0000
Subject: [PATCH] deploy(cert-manager): configure new cluster issuer with
 route53 dns resolver elifesciences/issues#9056

---
 system/infra/cert-manager/letsencrypt.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 system/infra/cert-manager/letsencrypt.yaml

diff --git a/system/infra/cert-manager/letsencrypt.yaml b/system/infra/cert-manager/letsencrypt.yaml
new file mode 100644
index 000000000..88d1f7bb5
--- /dev/null
+++ b/system/infra/cert-manager/letsencrypt.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: it-admin@elifesciences.org
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    solvers:
+    - dns01:
+        route53: {}