update pki

2026-01-21 22:16:55 +01:00
parent 744da48281
commit 3af0d0b170
4 changed files with 194 additions and 0 deletions
--- a/helm/certificates/ops/templates/cluster-issuer-ca-root.yaml
+++ b/helm/certificates/ops/templates/cluster-issuer-ca-root.yaml
@@ -2,6 +2,9 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
  name: ca-root-issuer
+  annotations:
+    # Ce ClusterIssuer doit être créé en premier (avant le Certificate ca-root-certificate)
+    argocd.argoproj.io/sync-wave: "-1"
 spec:
  selfSigned: {}