feat(adguard,traefik,cert-manager,reloader): foundation for adguard cert sync

- traefik: enable kubernetesIngress provider (needed for cert-manager HTTP-01)
- adguard: add reloader auto annotation for secret-driven restarts
- cert-manager: namespace, helm values (crds), staging+prod ClusterIssuers
- reloader: namespace manifest

adguardhome/k8s/adguard.yaml

@@ -62,6 +62,8 @@ spec:
     metadata:
       labels:
         app: adguard
+      annotations:
+        reloader.stakater.com/auto: "true"
     spec:
       containers:
         - name: adguard

cert-manager/k8s/cert-manager-values.yaml

@@ -0,0 +1,2 @@
+crds:
+  enabled: true

cert-manager/k8s/clusterissuer.yaml

@@ -0,0 +1,29 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    email: bobrovod@national.shitposting.agency
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-staging-account-key
+    solvers:
+      - http01:
+          ingress:
+            class: traefik
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    email: bobrovod@national.shitposting.agency
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-prod-account-key
+    solvers:
+      - http01:
+          ingress:
+            class: traefik

cert-manager/k8s/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager

reloader/k8s/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: reloader

traefik/k8s/traefik-values.yaml

@@ -31,7 +31,7 @@ deployment:
 
 providers:
   kubernetesIngress:
-    enabled: false
+    enabled: true
   kubernetesCRD:
     enabled: true
   kubernetesGateway:
@@ -125,7 +125,7 @@ certificatesResolvers:
   letsencrypt-staging:
     acme:
       email: bobrovod@national.shitposting.agency
-      storage: /data/letsencrypt/acme.json
+      storage: /data/letsencrypt/acme-staging.json
       caServer: https://acme-staging-v02.api.letsencrypt.org/directory
       httpChallenge:
         entryPoint: web