alexandre.pires
01bf71f8d2
- Introduced a new Cloudns issuer configuration for cert-manager. - Created separate tasks for DNS-01 and HTTP-01 challenge issuers. - Updated cert-manager tasks to include Cloudns provider and manage secrets. - Refactored existing LetsEncrypt issuer registration to use new task structure. - Added necessary Kubernetes resources for Cloudns integration, including RBAC and certificates. - Updated Terraform configurations to support new DNS records and service changes. - Adjusted deployment strategies for CoreDNS and Open WebUI applications.
25 lines
882 B
YAML
25 lines
882 B
YAML
- name: CertManager | Copy latest manifest
|
|
ansible.builtin.get_url:
|
|
url: "https://github.com/cert-manager/cert-manager/releases/download/v{{ microk8s_certmgr_version }}/cert-manager.yaml"
|
|
dest: "{{ k8s_etc }}/k8s-certmanager.yaml"
|
|
mode: "0600"
|
|
|
|
- name: CertManager | Apply manifest
|
|
environment:
|
|
PATH: "{{ k8s_venv }}/bin:{{ ansible_env.PATH }}"
|
|
vars:
|
|
ansible_python_interpreter: "{{ k8s_venv }}/bin/python"
|
|
kubernetes.core.k8s:
|
|
state: present
|
|
kubeconfig: "{{ k8s_kubeconfig }}"
|
|
src: "{{ k8s_etc }}/k8s-certmanager.yaml"
|
|
wait: true
|
|
|
|
- name: CertManager | LetsEncrypt DNS-01 issuer
|
|
ansible.builtin.include_tasks: issuers/dns-01.yml
|
|
when: microk8s_certmgr_letsencrypt_dns01 is true
|
|
|
|
- name: CertManager | LetsEncrypt HTTP-01 issuer
|
|
ansible.builtin.include_tasks: issuers/http-01.yml
|
|
when: microk8s_certmgr_letsencrypt_http01 is true
|