Merge "Add Cert-manager definition"

manifests/composite/infra/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../../function/cni/calico/v3
+  - ../../function/cert-manager/v1.1.0

manifests/function/cert-manager/README.rst

@@ -0,0 +1,12 @@
+cert-manager
+============
+
+cert-manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources.
+
+* cert-manager is deployed using `cert-manager.yaml`_.
+* The `cert-manager.yaml`_ is taken from `GitHub URL`_.
+* Included cert-manager version: v1.1.0
+
+.. _cert-manager.yaml: https://github.com/airshipit/airshipctl/tree/master/manifests/function/cert-manager/v1.1.0/upstream/cert-manager.yaml
+.. _GitHub URL: https://github.com/jetstack/cert-manager/releases
+

manifests/function/cert-manager/v1.1.0/deployment_toleration_patch.yaml

@@ -0,0 +1,36 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager-cainjector
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      tolerations:
+      - key: node-role.kubernetes.io/master
+        effect: NoSchedule
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      tolerations:
+      - key: node-role.kubernetes.io/master
+        effect: NoSchedule
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager-webhook
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      tolerations:
+      - key: node-role.kubernetes.io/master
+        effect: NoSchedule

manifests/function/cert-manager/v1.1.0/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+bases:
+- upstream
+
+patchesStrategicMerge:
+- deployment_toleration_patch.yaml

manifests/function/cert-manager/v1.1.0/upstream/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- cert-manager.yaml