From 2d963aa479a728b2e1ece6c21fa6d7d83f89bac5 Mon Sep 17 00:00:00 2001
From: fleaz <mail@felixbreidenstein.de>
Date: Sun, 25 May 2025 17:51:53 +0200
Subject: [PATCH] Add CI to deploy cert-manager

---
 .forgejo/workflows/deploy.yaml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .forgejo/workflows/deploy.yaml

diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
new file mode 100644
index 0000000..f0dc97f
--- /dev/null
+++ b/.forgejo/workflows/deploy.yaml
@@ -0,0 +1,29 @@
+name: Deployment
+
+on:
+  push:
+
+env:
+  CERT_MANAGER_VERSION: "1.17.1"
+
+jobs:
+  container:
+    runs-on: docker
+    container: fleaz/kubeci
+    steps:
+    - name: "Setup k8s context"
+      run: |
+        - echo "${{secrets.KUBE_API_CRT}}" > /tmp/ca.pem
+        - kubectl config set-cluster k3s --server=${{secrets.KUBE_HOST}}3 --certificate-authority=/tmp/ca.pem
+        - kubectl config set-credentials forgejo --token="${{secrets.KUBE_API_TOKEN}}"
+        - kubectl config set-context k3s --cluster k3s --user forgejo --namespace default
+        - kubectl config use-context k3s
+    - name: "Deploy"
+      run: |
+        helm repo add jetstack https://charts.jetstack.io --force-update
+        helm install \
+          cert-manager jetstack/cert-manager \
+          --namespace cert-manager \
+          --create-namespace \
+          --version v${CERT_MANAGER_VERSION} \
+          --set crds.enabled=true