From 3d1f1fd6117b6de74e4c7242a6ce034b49541676 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Fri, 12 May 2023 11:44:10 -0500
Subject: [PATCH] cert-manager: Add certificate for tabitha.biz

---
 cert-manager/cert-exporter.yaml |  6 ++++++
 cert-manager/certificates.yaml  | 18 ++++++++++++++++++
 2 files changed, 24 insertions(+)

diff --git a/cert-manager/cert-exporter.yaml b/cert-manager/cert-exporter.yaml
index 3f7c70e..e9b48d6 100644
--- a/cert-manager/cert-exporter.yaml
+++ b/cert-manager/cert-exporter.yaml
@@ -28,6 +28,11 @@ data:
       key: certificates/hatch.chat.key
       cert: certificates/hatch.chat.crt
       bundle: certificates/hatch.chat.pem
+    - name: tabitha-cert
+      namespace: default
+      key: certificates/tabitha.biz.key
+      cert: certificates/tabitha.biz.crt
+      bundle: certificates/tabitha.biz.pem
   known-hosts-command.ssh_config: |
     KnownHostsCommand /usr/bin/curl -fsL https://files.pyrocufflink.blue/ssh_known_hosts
 
@@ -47,6 +52,7 @@ rules:
   - pyrocufflink-cert
   - dustinhatchname-cert
   - hatchchat-cert
+  - tabitha-cert
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
diff --git a/cert-manager/certificates.yaml b/cert-manager/certificates.yaml
index add8ed6..5063b16 100644
--- a/cert-manager/certificates.yaml
+++ b/cert-manager/certificates.yaml
@@ -52,3 +52,21 @@ spec:
   privateKey:
     algorithm: ECDSA
     rotationPolicy: Always
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: tabitha-cert
+spec:
+  secretName: tabitha-cert
+  dnsNames:
+  - tabitha.biz
+  - '*.tabitha.biz'
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: zerossl
+  privateKey:
+    algorithm: ECDSA
+    rotationPolicy: Always