|
|
|
|
@ -1,16 +1,21 @@
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
### tags:
|
|
|
|
|
### cert-manager
|
|
|
|
|
|
|
|
|
|
- name: Install cert-manager via helm
|
|
|
|
|
kubernetes.core.helm:
|
|
|
|
|
name: cert-manager
|
|
|
|
|
chart_repo_url: "{{ k8s_certmanager_helm__chart_repo_url | default('https://charts.jetstack.io') }}"
|
|
|
|
|
chart_ref: "{{ k8s_certmanager_helm__chart_ref | default('cert-manager') }}"
|
|
|
|
|
chart_version: "{{ k8s_certmanager_helm__chart_version | default('v1.5.4') }}"
|
|
|
|
|
release_namespace: "{{ k8s_certmanager_helm__release_namespace | default('cert-manager') }}"
|
|
|
|
|
chart_ref: "{{ k8s_certmanager_helm__chart_ref }}"
|
|
|
|
|
chart_repo_url: "{{ k8s_certmanager_helm__chart_repo_url }}"
|
|
|
|
|
chart_version: "{{ k8s_certmanager_helm__chart_version }}"
|
|
|
|
|
release_namespace: "{{ k8s_certmanager_helm__release_namespace }}"
|
|
|
|
|
create_namespace: yes
|
|
|
|
|
release_values: "{{ k8s_certmanager_helm__release_values }}"
|
|
|
|
|
when:
|
|
|
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
|
|
|
tags:
|
|
|
|
|
- cert-manager
|
|
|
|
|
|
|
|
|
|
- name: Create secret for digitalocean-dns
|
|
|
|
|
kubernetes.core.k8s:
|
|
|
|
|
@ -25,8 +30,10 @@
|
|
|
|
|
access-token: "{{ digitalocean_authentication_token | string | b64encode }}"
|
|
|
|
|
when:
|
|
|
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
|
|
|
tags:
|
|
|
|
|
- cert-manager
|
|
|
|
|
|
|
|
|
|
- name: Create ClusterIssuer_letsencrypt_prod
|
|
|
|
|
- name: Create ClusterIssuer for letsencrypt (prod/staging)
|
|
|
|
|
kubernetes.core.k8s:
|
|
|
|
|
definition:
|
|
|
|
|
api_version: cert-manager.io/v1
|
|
|
|
|
@ -51,3 +58,5 @@
|
|
|
|
|
loop: "{{ k8s_certmanager_helm__cluster_issuers | dict2items }}"
|
|
|
|
|
when:
|
|
|
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
|
|
|
tags:
|
|
|
|
|
- cert-manager
|
|
|
|
|
|