feat: add cert-manager certificate for private ollama route

Author: xnoto

workloads/ollama/ollama.yaml

@@ -111,3 +111,20 @@ spec:
   tls:
     termination: edge
     insecureEdgeTerminationPolicy: Redirect
+    certificate: "" # Use default ingress certificate
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: ollama-cert
+  namespace: ollama
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
+spec:
+  secretName: ollama-tls
+  issuerRef:
+    name: letsencrypt-cloudflare
+    kind: ClusterIssuer
+  commonName: "ollama.apps.makeitwork.cloud"
+  dnsNames:
+    - "ollama.apps.makeitwork.cloud"