65 lines
2.2 KiB
YAML
65 lines
2.2 KiB
YAML
|
- name: CertManager | LetsEncrypt DNS-01 provider
|
||
|
|
ansible.builtin.include_tasks: "providers/{{ microk8s_certmgr_letsencrypt_dns01_provider }}.yml"
|
||
|
|
|
||
|
|
- name: CertManager | Register LetsEncrypt (prod)
|
||
|
|
environment:
|
||
|
|
PATH: "{{ k8s_venv }}/bin:{{ ansible_env.PATH }}"
|
||
|
|
vars:
|
||
|
|
ansible_python_interpreter: "{{ k8s_venv }}/bin/python"
|
||
|
|
kubernetes.core.k8s:
|
||
|
|
state: present
|
||
|
|
kubeconfig: "{{ k8s_kubeconfig }}"
|
||
|
|
wait: true
|
||
|
|
definition:
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: ClusterIssuer
|
||
|
|
metadata:
|
||
|
|
name: letsencrypt-prod
|
||
|
|
namespace: cert-manager
|
||
|
|
spec:
|
||
|
|
acme:
|
||
|
|
# The ACME server URL
|
||
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
||
|
|
# Email address used for ACME registration
|
||
|
|
email: "{{ microk8s_certmgr_letsencrypt_issuer_email }}"
|
||
|
|
# Name of a secret used to store the ACME account private key
|
||
|
|
privateKeySecretRef:
|
||
|
|
name: letsencrypt-prod
|
||
|
|
# Enable the HTTP-01 challenge provider
|
||
|
|
solvers:
|
||
|
|
- dns01:
|
||
|
|
webhook:
|
||
|
|
groupName: acme.ixon.cloud
|
||
|
|
solverName: cloudns
|
||
|
|
|
||
|
|
- name: CertManager | Register LetsEncrypt (staging)
|
||
|
|
environment:
|
||
|
|
PATH: "{{ k8s_venv }}/bin:{{ ansible_env.PATH }}"
|
||
|
|
vars:
|
||
|
|
ansible_python_interpreter: "{{ k8s_venv }}/bin/python"
|
||
|
|
kubernetes.core.k8s:
|
||
|
|
state: present
|
||
|
|
kubeconfig: "{{ k8s_kubeconfig }}"
|
||
|
|
wait: true
|
||
|
|
definition:
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: ClusterIssuer
|
||
|
|
metadata:
|
||
|
|
name: letsencrypt-staging
|
||
|
|
namespace: cert-manager
|
||
|
|
spec:
|
||
|
|
acme:
|
||
|
|
# The ACME server URL
|
||
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
||
|
|
# Email address used for ACME registration
|
||
|
|
email: "{{ microk8s_certmgr_letsencrypt_issuer_email }}"
|
||
|
|
# Name of a secret used to store the ACME account private key
|
||
|
|
privateKeySecretRef:
|
||
|
|
name: letsencrypt-staging
|
||
|
|
# Enable the HTTP-01 challenge provider
|
||
|
|
solvers:
|
||
|
|
- dns01:
|
||
|
|
webhook:
|
||
|
|
groupName: acme.ixon.cloud
|
||
|
|
solverName: cloudns
|