make replica for cert-manager configurable and add back pdb. (istio#1…

…4509)

install/kubernetes/helm/istio/charts/certmanager/templates/deployment.yaml

@@ -9,7 +9,7 @@ metadata:
     heritage: {{ .Release.Service }}
     release: {{ .Release.Name }}
 spec:
-  replicas: 1
+  replicas: {{ .Values.replicaCount }}
   selector:
     matchLabels:
       app: certmanager

install/kubernetes/helm/istio/charts/certmanager/templates/poddisruptionbudget.yaml

@@ -0,0 +1,24 @@
+{{- if .Values.global.defaultPodDisruptionBudget.enabled }}	
+apiVersion: policy/v1beta1	
+kind: PodDisruptionBudget	
+metadata:	
+  name: certmanager	
+  namespace: {{ .Release.Namespace }}	
+  labels:	
+    app: certmanager	
+    chart: {{ template "certmanager.chart" . }}	
+    heritage: {{ .Release.Service }}	
+    release: {{ .Release.Name }}	
+    version: {{ .Chart.Version }}	
+    {{- if .Values.podLabels }}	
+{{ toYaml .Values.podLabels | indent 4 }}	
+    {{- end }}	
+spec:	
+{{- if .Values.global.defaultPodDisruptionBudget.enabled }}	
+{{ include "podDisruptionBudget.spec" .Values.global.defaultPodDisruptionBudget }}	
+{{- end }}	
+  selector:	
+    matchLabels:	
+      app: certmanager	
+      release: {{ .Release.Name }}	
+{{- end }}

install/kubernetes/helm/istio/charts/certmanager/values.yaml

@@ -4,6 +4,7 @@
 # gateway must be updated by adding 'secretVolumes'. After the gateway
 # restart, DestinationRules can be created using the ACME-signed certificates.
 enabled: false
+replicaCount: 1
 hub: quay.io/jetstack
 tag: v0.6.2
 resources: {}