installer scripts
diff --git a/scripts/homelab/installer/cert-manager.sh b/scripts/homelab/installer/cert-manager.sh
new file mode 100644
index 0000000..c3a46cd
--- /dev/null
+++ b/scripts/homelab/installer/cert-manager.sh
@@ -0,0 +1,51 @@
+#!/bin/sh
+
+helm upgrade --create-namespace \
+ --namespace cert-manager \
+ cert-manager jetstack/cert-manager \
+ --version v1.4.0 \
+ --set installCRDs=true \
+ --set resources.requests.cpu="100m" \
+ --set resources.limits.cpu="250m" \
+ --set resources.requests.memory="50M" \
+ --set resources.limits.memory="150M" \
+ --set tolerations[0].key="pcloud" \
+ --set tolerations[0].operator="Equal" \
+ --set tolerations[0].value="role" \
+ --set tolerations[0].effect="NoSchedule" \
+ --set cainjector.resources.requests.cpu="100m" \
+ --set cainjector.cpu="250m" \
+ --set cainjector.resources.requests.memory="50M" \
+ --set cainjector.resources.limits.memory="150M" \
+ --set cainjector.tolerations[0].key="pcloud" \
+ --set cainjector.tolerations[0].operator="Equal" \
+ --set cainjector.tolerations[0].value="role" \
+ --set cainjector.tolerations[0].effect="NoSchedule" \
+ --set webhook.resources.requests.cpu="100m" \
+ --set webhook.resources.limits.cpu="250m" \
+ --set webhook.resources.requests.memory="50M" \
+ --set webhook.resources.limits.memory="150M" \
+ --set webhook.tolerations[0].key="pcloud" \
+ --set webhook.tolerations[0].operator="Equal" \
+ --set webhook.tolerations[0].value="role" \
+ --set webhook.tolerations[0].effect="NoSchedule"
+
+kubectl apply -f cert-manager-webhook-gandi/rbac.yaml
+
+helm upgrade --namespace cert-manager \
+ cert-manager-webhook-gandi ./cert-manager-webhook-gandi/deploy/cert-manager-webhook-gandi \
+ --set image.repository=giolekva/cert-manager-webhook-gandi \
+ --set image.tag=latest \
+ --set image.pullPolicy=Always \
+ --set logLevel=2 \
+ --set resources.requests.cpu="100m" \
+ --set resources.limits.cpu="250m" \
+ --set resources.requests.memory="50M" \
+ --set resources.limits.memory="150M" \
+ --set tolerations[0].key="pcloud" \
+ --set tolerations[0].operator="Equal" \
+ --set tolerations[0].value="role" \
+ --set tolerations[0].effect="NoSchedule"
+
+kubectl apply -f cluster-issuer.yaml
+kubectl apply -f root-ca-server.yaml