CI: Configure cert-manager to provide wildcard SSL for EKS cluster FQDN

Summary

In #1688 (closed), we configured jetstack/cert-manager to provide a wildcard SSL certificate for the GKE cluster's FQDN.

We should do the same for the EKS cluster's sub-domain.

Current state

We've placed a traditional wildcard SSL certificate into the EKS cluster, which expires Wednesday, April 1, 2020 at 7:59:59 PM

Screenshot_20191112_095030

Work

  • install jetstack/cert-manager chart to cert-manager namespace
  • configured an Issuer within the CI namespace, using the appropriate credentials for DNS-01 validation capability
  • create a Certificate resource to request a wildcard SSL certificate be placed into an appropriately named secret

@mendeni @twk3 - Placing this in %12.9 as as it aligns with the hard due date I've set of 2020-03-30

Edited by Jason Plum