prole/infrastructure/roles/k3s/tasks/certmgr.yml
chrisfu 765aa0b926 Checkpoint: cluster env UI layout + k3s common services
- Tighten Cluster Environment screen layout; switch Service/Prod to kubectx context selection; keep namespace and key controls on one line; ensure Repair button remains reachable.

- Add UI layout regression test to render with large mock data and assert key widgets remain visible and console is scrollable.

- Make kubeconfig generation deterministic under tests by avoiding overwriting cert-based kubeconfigs; write token sidecar kubeconfig when needed.

- Update common-services init scripts and add k3s/Helm deployment bits (svc-check, Kong/CertMgr tasks).
2026-02-27 14:35:14 -08:00

30 lines
1.1 KiB
YAML

---
- name: Check for cert-manager CRD
ansible.builtin.command: k3s kubectl get crd certificates.cert-manager.io
register: k3s_certmgr_crd
changed_when: false
failed_when: false
run_once: true
- name: Install cert-manager (CRDs + controller)
ansible.builtin.command: >-
k3s kubectl apply -f
https://github.com/cert-manager/cert-manager/releases/download/{{ k3s_cert_manager_version }}/cert-manager.yaml
when: k3s_certmgr_crd.rc != 0
run_once: true
- name: Wait for cert-manager deployment
ansible.builtin.command: k3s kubectl -n cert-manager rollout status deployment/cert-manager --timeout=180s
when: k3s_certmgr_crd.rc != 0
run_once: true
- name: Wait for cert-manager-cainjector deployment
ansible.builtin.command: k3s kubectl -n cert-manager rollout status deployment/cert-manager-cainjector --timeout=180s
when: k3s_certmgr_crd.rc != 0
run_once: true
- name: Wait for cert-manager-webhook deployment
ansible.builtin.command: k3s kubectl -n cert-manager rollout status deployment/cert-manager-webhook --timeout=180s
when: k3s_certmgr_crd.rc != 0
run_once: true