From 3988ff13a83833b2ccff5f1eb07f7c165208f494 Mon Sep 17 00:00:00 2001
From: zhenyus <zhenyus@mathmast.com>
Date: Thu, 31 Jul 2025 15:30:16 +0800
Subject: [PATCH] ci(bump): update reconciler image version for alpha to 1.0.2

Signed-off-by: zhenyus <zhenyus@mathmast.com>
---
 .../clusterissuer/internalmathmast-com.yaml   | 22 +++++++++++++++++++
 .../cert-manager/service-principal.yaml       |  8 +++++++
 2 files changed, 30 insertions(+)
 create mode 100644 cluster/manifests/freeleaps-controls-system/cert-manager/clusterissuer/internalmathmast-com.yaml
 create mode 100644 cluster/manifests/freeleaps-controls-system/cert-manager/service-principal.yaml

diff --git a/cluster/manifests/freeleaps-controls-system/cert-manager/clusterissuer/internalmathmast-com.yaml b/cluster/manifests/freeleaps-controls-system/cert-manager/clusterissuer/internalmathmast-com.yaml
new file mode 100644
index 00000000..31a3d7c2
--- /dev/null
+++ b/cluster/manifests/freeleaps-controls-system/cert-manager/clusterissuer/internalmathmast-com.yaml
@@ -0,0 +1,22 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: internal-mathmast-com
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: acme@internalmathmast.com
+    privateKeySecretRef:
+      name: internal-mathmast-com-certs
+    solvers:
+      - dns01:
+          azureDNS:
+            clientID: "a73a7a8f-4349-4671-8b55-feea90e6f984"
+            clientSecretSecretRef:
+              name: freeleaps-kubernetes-azure-dns-manager
+              key: client-secret
+            subscriptionID: "0a280068-dec4-4bf0-9f04-65b64f412b50"
+            tenantID: "cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24"
+            resourceGroupName: "k8s"
+            hostedZoneName: "internalmathmast.com"
+            environment: "AzurePublicCloud"
diff --git a/cluster/manifests/freeleaps-controls-system/cert-manager/service-principal.yaml b/cluster/manifests/freeleaps-controls-system/cert-manager/service-principal.yaml
new file mode 100644
index 00000000..304969cb
--- /dev/null
+++ b/cluster/manifests/freeleaps-controls-system/cert-manager/service-principal.yaml
@@ -0,0 +1,8 @@
+kind: Secret
+apiVersion: v1
+metadata:
+  name: freeleaps-kubernetes-azure-dns-manager
+  namespace: freeleaps-controls-system
+type: Opaque
+stringData:
+  client-secret: "fHL8Q~nP3g4TvXD4ufVawD8MI0KE-NmJN_lPGdys"