Add support to create a issuer and CA via cert-manager (#342)

Co-authored-by: Kevin Fox <[email protected]>

.github/tests/upstream-authority-cert-manager/cert-manager-ca.yaml

@@ -1,31 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: selfsigned-issuer
-spec:
-  selfSigned: {}
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: demo-selfsigned-ca
-spec:
-  isCA: true
-  commonName: demo-selfsigned-ca
-  secretName: root-secret
-  privateKey:
-    algorithm: ECDSA
-    size: 256
-  issuerRef:
-    name: selfsigned-issuer
-    kind: Issuer
-    group: cert-manager.io
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: demo-ca
-spec:
-  ca:
-    secretName: root-secret

.github/tests/upstream-authority-cert-manager/pre-install.sh

@@ -5,5 +5,3 @@ SCRIPTPATH="$(dirname "${SCRIPT}")"
 scenario="${scenario:-$(basename "${SCRIPTPATH}")}"
 
 helm install cert-manager cert-manager --namespace cert-manager --create-namespace --version "$VERSION_CERT_MANAGER" --set installCRDs=true --repo "$HELM_REPO_CERT_MANAGER" --wait
-SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
-kubectl apply -f "${SCRIPT_DIR}/cert-manager-ca.yaml" -n "$scenario"

.github/tests/upstream-authority-cert-manager/values.yaml

@@ -2,4 +2,5 @@ spire-server:
   upstreamAuthority:
     certManager:
       enabled: true
-      issuer_name: "demo-ca"
+      ca:
+        create: true