[common] I'd like cert-manager Issuer creation and management to be centralized about library-charts

[onedr0p]

I'm pretty sure a bunch of people do a single ClusterIssuer. I'll go ahead and close this because I don't really see the benefit of having the common chart create issuers.

[onedr0p]

Maybe they are namespace scoped? But you can definitely define them globally.

https://github.com/onedr0p/home-ops/blob/main/cluster/core/cert-manager/issuers/letsencrypt-production.yaml

[cornfeedhobo]

If you want to create a single Issuer that can be consumed in multiple namespaces, you should consider creating a ClusterIssuer resource. This is almost identical to the Issuer resource, however is non-namespaced so it can be used to issue Certificates across all namespaces.

TIL. Thanks for pointing this out.

Hmm, I guess there could still be merits to per-service Issuers, so I'll leave it up to your team to decide if this should be closed. I can see where I'd probably use a ClusterIssuer for most services... 🤷