Managed by cert-manager.
oc create namespace cert-manager
oc apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v0.12.0/cert-manager-openshift.yaml
Create Secret cloudflare-apikey-secret:
kubectl create secret generic cloudflare-apikey-secret --from-literal "apikey=<API_KEY>" --namespace=cert-manager
Create letsencrypt ClusterIssuer:
oc apply -f cluster-issuer.yaml
Create a request for a certificate to use for Ingress:
oc apply -f certificate.yaml
Configure the cluster to use the new certificate (docs):
oc patch --type=merge --namespace openshift-ingress-operator ingresscontrollers/default --patch '{"spec":{"defaultCertificate":{"name":"metal3-io-tls"}}}'