Add self-contained API simulators lab with Compose and Helm.

Ship Proxmox, oVirt, VMware, and OpenStack behind one Postgres stack,
Makefile helpers (up/clean/helm up|down/push), and a Helm chart with
namespace, Let's Encrypt ingresses, migrate inits, and skip-if-seeded jobs.

charts/api-simulators-lab/templates/clusterissuer.yaml

@@ -0,0 +1,42 @@
+{{- if and .Values.certManager.enabled .Values.certManager.createClusterIssuer }}
+{{- $solverClass := .Values.certManager.solverIngressClassName | default "nginx" }}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ .Values.certManager.issuerName }}
+  labels:
+    {{- include "lab.labels" . | nindent 4 }}
+spec:
+  acme:
+    email: {{ required "certManager.email is required when createClusterIssuer=true" .Values.certManager.email | quote }}
+    server: {{ .Values.certManager.server | quote }}
+    privateKeySecretRef:
+      name: {{ printf "%s-account-key" .Values.certManager.issuerName }}
+    solvers:
+      - http01:
+          ingress:
+            {{- if $solverClass }}
+            ingressClassName: {{ $solverClass }}
+            {{- end }}
+---
+{{- if .Values.certManager.createStagingIssuer }}
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: {{ .Values.certManager.stagingIssuerName }}
+  labels:
+    {{- include "lab.labels" . | nindent 4 }}
+spec:
+  acme:
+    email: {{ .Values.certManager.email | quote }}
+    server: {{ .Values.certManager.stagingServer | quote }}
+    privateKeySecretRef:
+      name: {{ printf "%s-account-key" .Values.certManager.stagingIssuerName }}
+    solvers:
+      - http01:
+          ingress:
+            {{- if $solverClass }}
+            ingressClassName: {{ $solverClass }}
+            {{- end }}
+{{- end }}
+{{- end }}