Adding fission for real

core/fission/certs.tf

@@ -0,0 +1,35 @@
+resource "kubectl_manifest" "issuer" {
+  yaml_body  = <<-EOF
+    apiVersion: "cert-manager.io/v1"
+    kind: "Issuer"
+    metadata:
+      name: "fission-selfsigned"
+      namespace: "${var.namespace}"
+      labels: ${jsonencode(local.common-labels)}
+    spec:
+      selfSigned: {}
+  EOF
+}
+resource "kubectl_manifest" "fission-webhook-certs" {
+  yaml_body  = <<-EOF
+    apiVersion: cert-manager.io/v1
+    kind: Certificate
+    metadata:
+      name: "fission-webhook-certs"
+      labels: ${jsonencode(local.common-labels)}
+      namespace: ${var.namespace}
+    spec:
+      dnsNames:
+      - webhook-service
+      - webhook-service.${var.namespace}
+      - webhook-service.${var.namespace}.svc
+      - webhook-service.${var.namespace}.svc.cluster.local
+      issuerRef:
+        kind: Issuer
+        name: fission-selfsigned
+      secretName: fission-webhook-certs
+      subject:
+        organizationalUnits:
+        - fission-webhook
+  EOF
+}