cert manager

ansible/playbooks/05_k8s_deploy.yaml

@@ -1,28 +1,35 @@
 ---
-- name: configure control plane
-  hosts: k8s_control
-  gather_facts: true
-  become: true
-  roles:
-    - k8s_control
+# - name: configure control plane
+#   hosts: k8s_control
+#   gather_facts: true
+#   become: true
+#   roles:
+#     - k8s_control
 
-- name: configure calico networking
-  hosts: localhost
-  gather_facts: true
-  become: false
-  roles:
-    - k8s_network
+# - name: configure calico networking
+#   hosts: localhost
+#   gather_facts: true
+#   become: false
+#   roles:
+#     - k8s_network
 
-- name: remove control-plane taints
+# - name: remove control-plane taints
+#   hosts: localhost
+#   gather_facts: false
+#   become: false
+#   roles:
+#     - k8s_taint
+
+# - name: configure storage operator
+#   hosts: localhost
+#   gather_facts: false
+#   become: false
+#   roles:
+#     - k8s_storage_ebs_deploy
+
+- name: configure cert manager
   hosts: localhost
   gather_facts: false
   become: false
   roles:
-    - k8s_taint
-
-- name: configure storage operator
-  hosts: localhost
-  gather_facts: false
-  become: false
-  roles:
-    - k8s_storage_ebs_deploy
+    - k8s_cert_manager

ansible/roles/k8s_cert_manager/default/main.yaml

@@ -0,0 +1,2 @@
+---
+cert_manager_version: v1.10.1

ansible/roles/k8s_cert_manager/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- name: download the cert manager manifest
+  ansible.builtin.uri:
+    url: https://github.com/cert-manager/cert-manager/releases/download/{{ cert_manager_version }}/cert-manager.yaml
+    dest: "{{ ansible_search_path[0] }}/files/cert_manager_{{ cert_manager_version }}.yaml"
+    creates: "{{ ansible_search_path[0] }}/files/cert_manager_{{ cert_manager_version }}.yaml"
+    mode: 0664
+
+- name: install cert manager manifest to cluster
+  kubernetes.core.k8s:
+    state: present
+    src: "{{ ansible_search_path[0] }}/files/cert_manager_{{ cert_manager_version }}.yaml"