Adding in example for GKE-Autopilot, closes #19

.gitignore

@@ -17,6 +17,7 @@ nuget/
 
 ci-scripts/
 *.tar.gz
+**/*.out
 
 sdk/dotnet/version.txt
 sdk/java/.gradle

examples/gke-auto-pilot-cert-manager-ts/.gitignore

@@ -0,0 +1,3 @@
+/bin/
+/node_modules/
+Pulumi.*.yaml

examples/gke-auto-pilot-cert-manager-ts/Pulumi.yaml

@@ -0,0 +1,3 @@
+name: gke-auto-pilot-cert-manager
+runtime: nodejs
+description: A CertManager installation for GKE AutoPilot

examples/gke-auto-pilot-cert-manager-ts/index.ts

@@ -0,0 +1,45 @@
+import * as k8s from "@pulumi/kubernetes";
+import * as certmanager from "@pulumi/kubernetes-cert-manager";
+
+// Create a sandbox namespace.
+const ns = new k8s.core.v1.Namespace("gke-ap-cert-mgr");
+
+// Install a cert manager into our cluster.
+const manager = new certmanager.CertManager("cert-manager", {
+    installCRDs: true,
+    helmOptions: {
+        namespace: ns.metadata.name,
+        version: "v1.15.3"
+    },
+    global: {
+        leaderElection: {
+            namespace: ns.metadata.name,
+        }
+    },
+    prometheus: {
+        enabled: false,
+    }
+});
+
+// Create a cluster issuer that uses self-signed certificates.
+// This is not very secure, but has the least amount of external
+// dependencies, so is simple. Please refer to
+// https://cert-manager.io/docs/configuration/selfsigned/
+// for additional details on other signing providers.
+const issuer = new k8s.apiextensions.CustomResource(
+    "issuer",
+    {
+        apiVersion: "cert-manager.io/v1",
+        kind: "Issuer",
+        metadata: {
+            name: "selfsigned-issuer",
+            namespace: ns.metadata.name,
+        },
+        spec: {
+            selfSigned: {},
+        },
+    },
+    { dependsOn: manager }
+);
+
+export const certManagerStatus = manager.status;

examples/gke-auto-pilot-cert-manager-ts/package.json

@@ -0,0 +1,11 @@
+{
+    "name": "gke-auto-pilot",
+    "devDependencies": {
+        "@types/node": "^10.0.0"
+    },
+    "dependencies": {
+        "@pulumi/kubernetes": "4.19.0",
+        "@pulumi/pulumi": "3.143.0",
+        "@pulumi/kubernetes-cert-manager": "latest"
+    }
+}

examples/gke-auto-pilot-cert-manager-ts/tsconfig.json

@@ -0,0 +1,18 @@
+{
+    "compilerOptions": {
+        "strict": true,
+        "outDir": "bin",
+        "target": "es2016",
+        "module": "commonjs",
+        "moduleResolution": "node",
+        "sourceMap": true,
+        "experimentalDecorators": true,
+        "pretty": true,
+        "noFallthroughCasesInSwitch": true,
+        "noImplicitReturns": true,
+        "forceConsistentCasingInFileNames": true
+    },
+    "files": [
+        "index.ts"
+    ]
+}

examples/simple-cert-manager-py/requirements.txt

@@ -1,3 +1,3 @@
 pulumi>=3.0.0,<4.0.0
-pulumi-kubernetes>=3.0.0,<5.0.0
+pulumi-kubernetes>=4.0.0,<5.0.0
 pulumi-kubernetes-cert-manager

examples/simple-cert-manager-ts/package.json

@@ -4,8 +4,8 @@
         "@types/node": "^10.0.0"
     },
     "dependencies": {
-        "@pulumi/pulumi": "^3.0.0",
-        "@pulumi/kubernetes": "^3.0.0",
+        "@pulumi/kubernetes": "4.19.0",
+        "@pulumi/pulumi": "3.143.0",
         "@pulumi/kubernetes-cert-manager": "latest"
     }
 }

provider/pkg/provider/chart.go

@@ -118,7 +118,7 @@ type CertManagerGlobalPodSecurityPolicy struct {
 
 type CertManagerGlobalLeaderElection struct {
 	// Override the namespace used to store the ConfigMap for leader election.
-	Namespace *string `pulumi:"namespace"`
+	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
 	// The duration that non-leader candidates will wait after observing a
 	// leadership renewal until attempting to acquire leadership of a led but
 	// unrenewed leader slot. This is effectively the maximum duration that a