add letsencrypt issuer example

examples/kustomization_user_deploy/README.md

@@ -51,6 +51,12 @@ In more complex use cases, you may want to deploy to multiple namespaces with a
 
 For a full demo see the [multiple-namespaces](multiple-namespaces/) example.
 
+### Using Letsencrypt with cert-manager
+
+You can use letsencrypt issuer to issue tls certificate see [example](https://doc.traefik.io/traefik/user-guides/cert-manager/). You need to create a issuer type of `ClusterIssuer` to make is available in all namespaces, unlike in the traefik example. Also note that the `server` in the example is a stagging server, you would need a prod server to use in, well, production. The prod server link can be found at `https://letsencrypt.org/getting-started/`
+
+For a full demo see the [letsencrypt](letsencrypt/)
+
 ## Debugging
 
 To check the existing kustomization, you can run the following command:

examples/kustomization_user_deploy/letsencrypt/kustomization.yaml.tpl

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - letsencrypt.yaml
+

examples/kustomization_user_deploy/letsencrypt/letsencrypt.yaml.tpl

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+  namespace: cert-manager
+spec:
+  acme:
+    email: <[email protected]> <--- change this to your email
+    server: https://acme-v02.api.letsencrypt.org/directory | https://acme-staging-v02.api.letsencrypt.org/directory <-- pick one
+    privateKeySecretRef:
+      name: letsencrypt-account-key
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: traefik