Convert to static Certificates

There was an issue that caused two certificates to fight with
each other - one created by Ingress shim and one by the
bootstrap as a Certificate object, for the same domain.

This patch moves away from using ingress-shim.

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>

scripts/create-namespaces.sh

@@ -1,5 +1,8 @@
 #!/bin/bash
 
+# Install the CustomResourceDefinition resources separately
+kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml
+
 kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml
 
 # Create the namespace for cert-manager

scripts/install-cert-manager.sh

@@ -1,6 +1,3 @@
-# Install the CustomResourceDefinition resources separately
-kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml
-
 # Add the Jetstack Helm repository
 helm repo add jetstack https://charts.jetstack.io
 

templates/k8s/ingress-auth.yml

@@ -5,10 +5,6 @@ metadata:
   name: openfaas-auth-ingress
   namespace: openfaas
   annotations:
-    {{ if .TLS }}
-    certmanager.k8s.io/cluster-issuer: letsencrypt-{{.IssuerType}}
-    kubernetes.io/tls-acme: "true"
-    {{ end }}
     kubernetes.io/ingress.class: "nginx"
     nginx.ingress.kubernetes.io/limit-connections: "20"
     nginx.ingress.kubernetes.io/limit-rpm: "600"

templates/k8s/ingress-wildcard.yml

@@ -5,10 +5,6 @@ metadata:
   name: openfaas-ingress
   namespace: openfaas
   annotations:
-    {{ if .TLS }}
-    certmanager.k8s.io/cluster-issuer: letsencrypt-{{.IssuerType}}
-    kubernetes.io/tls-acme: "true"
-    {{ end }}
     kubernetes.io/ingress.class: "nginx"
     nginx.ingress.kubernetes.io/limit-connections: "20"
     nginx.ingress.kubernetes.io/limit-rpm: "600"