From 1ad5879995c43cd9ed78f686ae56206536f9f512 Mon Sep 17 00:00:00 2001
From: j <repobase@j7b.net>
Date: Thu, 3 Jul 2025 13:58:58 +1000
Subject: [PATCH] Configure SSL cert to reflect to all namespaces

---
 deployments/operators/reflector.yaml | 4 ++--
 deployments/ssl/certmanager.yaml     | 6 ++++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/deployments/operators/reflector.yaml b/deployments/operators/reflector.yaml
index 0e4fa29..c4fb80c 100644
--- a/deployments/operators/reflector.yaml
+++ b/deployments/operators/reflector.yaml
@@ -30,7 +30,7 @@ spec:
     reflector:
       config:
         enableSecretReflections: true
-        enableConfigMapReflections: false  # optional
+        enableConfigMapReflections: false
         reflectionNamespaces:
-          - "*"  # reflect to all namespaces
+          - "*" 
 
diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index 0df7360..ea317d0 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -59,6 +59,12 @@ metadata:
   namespace: cert-manager
 spec:
   secretName: wildcard-hxme-net
+  secretTemplate:
+    annotations:
+      reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
+      reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces: "*"
+      reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true"
+      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "*"
   issuerRef:
     name: letsencrypt-rfc2136
     kind: ClusterIssuer