35 lines
1012 B
YAML
35 lines
1012 B
YAML
- name: Ensure cert-manager repository exists
|
|
kubernetes.core.helm_repository:
|
|
name: jetstack
|
|
url: https://charts.jetstack.io
|
|
|
|
- name: Ensure cert-manager is installed
|
|
kubernetes.core.helm:
|
|
release_name: cert-manager
|
|
release_namespace: cert-manager
|
|
chart_ref: jetstack/cert-manager
|
|
chart_version: "{{ kubernetes_cert_manager_chart_version }}"
|
|
create_namespace: true
|
|
values: "{{ kubernetes_cert_manager_values }}"
|
|
run_once: true
|
|
|
|
- name: Ensure ClusterIssuer exists
|
|
kubernetes.core.k8s:
|
|
state: present
|
|
definition:
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: "{{ kubernetes_cert_manager_email }}"
|
|
privateKeySecretRef:
|
|
name: letsencrypt-account-key
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
ingressClassName: traefik
|
|
run_once: true
|