ExternalDNS + CertManager helm chart terraform

external-dns_and_cert-manager.tf

## deploys the external-dns - https://github.com/kubernetes-sigs/external-dns
## view latest version: helm search repo external-dns/external-dns
## view possible values: helm inspect values external-dns/external-dns
resource "helm_release" "external_dns" {
  name             = "external-dns"
  repository       = "https://kubernetes-sigs.github.io/external-dns"
  chart            = "external-dns"
  version          = "1.8.0"
  namespace        = "external-dns"
  wait_for_jobs    = true
  create_namespace = true

  values = [
    <<YAML

  sources:
    - ingress
    - service

  podLabels:
    app: external-dns

  resources:
    requests:
      memory: 50Mi
      cpu: 10m
    limits:
      memory: 200Mi

  domainFilters:
  - ${var.fqdn}

  txtOwnerId: ${var.project_id}/external-dns
  policy: sync
  registry: txt
  provider: google
  YAML
  ]
}



## deploys the cert-manager - https://cert-manager.io/docs/installation/helm/
## view latest version: helm search repo cert-manager
## view possible values: helm inspect values jetstack/cert-manager
resource "helm_release" "cert_manager" {
  name             = "cert-manager"
  repository       = "https://charts.jetstack.io"
  chart            = "cert-manager"
  version          = "1.8.0"
  namespace        = "cert-manager"
  create_namespace = true # idempotent: the namespace will not be destroyed even if it was created by this provider
  wait_for_jobs    = true
  #verify          = true
  #lint            = true

  values = [
    <<YAML
  installCRDs: "true"
  resources:
    requests:
      cpu: 10m
      memory: 32Mi
  webhook:
    resources:
      requests:
        cpu: 10m
        memory: 32Mi
  cainjector:
    resources:
      requests:
        cpu: 10m
        memory: 32Mi
  startupapicheck:
    resources:
      requests:
        cpu: 10m
        memory: 32Mi
  YAML
  ]

  depends_on = [
    google_container_node_pool.argus["default"]
  ]
}