- name: Ensure cert-manager repository exists
  kubernetes.core.helm_repository:
    name: jetstack
    url: https://charts.jetstack.io

- name: Ensure cert-manager is installed
  kubernetes.core.helm:
    release_name: cert-manager
    release_namespace: cert-manager
    chart_ref: jetstack/cert-manager
    chart_version: "{{ kubernetes_cert_manager_chart_version }}"
    create_namespace: true
    values: "{{ kubernetes_cert_manager_values }}"
  run_once: true

- name: Ensure ClusterIssuer exists
  kubernetes.core.k8s:
    state: present
    definition:
      apiVersion: cert-manager.io/v1
      kind: ClusterIssuer
      metadata:
        name: letsencrypt
      spec:
        acme:
          server: https://acme-v02.api.letsencrypt.org/directory
          email: "{{ kubernetes_cert_manager_email }}"
          privateKeySecretRef:
            name: letsencrypt-account-key
          solvers:
            - http01:
                ingress:
                  ingressClassName: traefik
  run_once: true