Add cert-manager with Cloudflare DNS-01 ClusterIssuers

apps/cert-manager/Chart.yaml

@@ -0,0 +1,19 @@
+# An "umbrella" chart, same pattern as apps/metallb/ and apps/longhorn/:
+# declares a dependency on the upstream cert-manager chart. Argo CD detects
+# this as a Helm source because a Chart.yaml exists at this path.
+#
+# It also carries two ClusterIssuer templates and one SopsSecret (see
+# apps/cert-manager/templates/) — cert-manager's own custom resources that
+# tell it how to actually prove domain ownership and request certificates.
+# See docs/12-cert-manager.md.
+apiVersion: v2
+name: cert-manager-app
+description: Installs cert-manager plus this cluster's Let's Encrypt ClusterIssuers using Cloudflare DNS-01
+version: 0.1.0
+dependencies:
+  - name: cert-manager
+    # A version range rather than an exact pin, so this doesn't silently go
+    # stale. Check https://cert-manager.io/docs/releases/ for the current
+    # release and pin an exact version for a fully reproducible install.
+    version: ">=1.16.0"
+    repository: https://charts.jetstack.io