Major changes

ansible/roles/microk8s/defaults/main.yml

@@ -11,6 +11,7 @@ microk8s_metallb_version: 0.14.9
 # certificate manager
 microk8s_issuer_email: webmaster@localhost.localdomain
 microk8s_certmgr_version: 1.14.5
+microk8s_lets_encrypt_issuer: true
 
 # microk8s specific
 microk8s_channel: "{{ microk8s_k8s_version }}/stable"
@@ -39,4 +40,4 @@ microk8s_iac_user: "provision"
 
 microk8s_encryption_secret: "a13labs"
 microk8s_encryption_cfg: "/etc/microk8s_encryption.yaml"
-microk8s_encryption_kms_socket:
+microk8s_encryption_kms_socket: ""

ansible/roles/microk8s/tasks/certmanager.yml

@@ -16,6 +16,7 @@
     wait: true
 
 - name: CertManager | Register LetsEncrypt (prod)
+  when: microk8s_lets_encrypt_issuer is true
   environment:
     PATH: "{{ k8s_venv }}/bin:{{ ansible_env.PATH }}"
   vars:
@@ -46,6 +47,7 @@
                   class: public
 
 - name: CertManager | Register LetsEncrypt (staging)
+  when: microk8s_lets_encrypt_issuer is true
   environment:
     PATH: "{{ k8s_venv }}/bin:{{ ansible_env.PATH }}"
   vars:

ansible/roles/microk8s/templates/encryption-provider-config.yml.j2

@@ -6,7 +6,7 @@ resources:
     - secrets
     - configmaps
     providers:
-{% if microk8s_encryption_kms_socket is defined %}
+{% if microk8s_encryption_kms_socket != "" %}
     - kms:
         apiVersion: v2
         name: aws-encryption-provider