feat: add cert-manager role

2026-07-05 22:18:55 +01:00
parent 02af027e43
commit 81bf536ac3
2 changed files with 40 additions and 0 deletions
@@ -0,0 +1,6 @@
+kubernetes_cert_manager_chart_version: "1.20.3"
+kubernetes_cert_manager_email: JamesAllenby@protonmail.com
+
+kubernetes_cert_manager_values:
+  crds:
+    enabled: true
@@ -0,0 +1,34 @@
+- name: Ensure cert-manager repository exists
+  kubernetes.core.helm_repository:
+    name: jetstack
+    url: https://charts.jetstack.io
+
+- name: Ensure cert-manager is installed
+  kubernetes.core.helm:
+    release_name: cert-manager
+    release_namespace: cert-manager
+    chart_ref: jetstack/cert-manager
+    chart_version: "{{ kubernetes_cert_manager_chart_version }}"
+    create_namespace: true
+    values: "{{ kubernetes_cert_manager_values }}"
+  run_once: true
+
+- name: Ensure ClusterIssuer exists
+  kubernetes.core.k8s:
+    state: present
+    definition:
+      apiVersion: cert-manager.io/v1
+      kind: ClusterIssuer
+      metadata:
+        name: letsencrypt
+      spec:
+        acme:
+          server: https://acme-v02.api.letsencrypt.org/directory
+          email: "{{ kubernetes_cert_manager_email }}"
+          privateKeySecretRef:
+            name: letsencrypt-account-key
+          solvers:
+            - http01:
+                ingress:
+                  ingressClassName: traefik
+  run_once: true