k8s let's encrypt issuer and cert creation

ansible-5/roles/prod.k3s/tasks/cert_manager.yml

@@ -0,0 +1,34 @@
+---
+# https://cert-manager.io/docs/installation/helm/#installing-with-helm
+- name: install cert-manager
+  kubernetes.core.helm:
+    kubeconfig_path: "/etc/rancher/k3s/k3s.yaml"
+    atomic: true
+    name: cert-manager
+    chart_ref: jetstack/cert-manager
+    release_namespace: cert-manager
+    create_namespace: true
+    release_values:
+      installCRDs: true
+  become: true
+
+# create issuer
+- name: create let's encrypt issuers
+  kubernetes.core.k8s:
+    kubeconfig: "/etc/rancher/k3s/k3s.yaml"
+    state: present
+    definition: "{{ lookup('file', item) | from_yaml }}"
+  become: true
+  loop:
+    - 'cert-manager/acme.issuer.stg.yaml'
+    - 'cert-manager/acme.issuer.prod.yaml'
+
+- name: create let's encrypt certificates
+  kubernetes.core.k8s:
+    kubeconfig: "/etc/rancher/k3s/k3s.yaml"
+    state: present
+    definition: "{{ lookup('file', item) | from_yaml }}"
+  become: true
+  loop:
+    - 'cert-manager/certificate.xai-corp.stg.yaml'
+    - 'cert-manager/certificate.xai-corp.prod.yaml'