[skip travis] updates to last commit

Signed-off-by: Charlie Mordant <[email protected]>

defaults/main.yml

@@ -1,4 +1,4 @@
 ---
 
 kube_firewall_zone: 'public'
-cert_manager_chart_version: 'v1.12.1'
+cert_manager_chart_version: 'v1.14.2'

tasks/install-cmctl.yml

@@ -0,0 +1,45 @@
+---
+
+- name: Install-cmctl | Install golang
+  ansible.builtin.package:
+    name: golang
+    state: present
+  become: True
+
+- name: Get stats of a file
+  ansible.builtin.stat:
+    path: /usr/local/bin/cmctl
+  register: st
+  become: True
+
+- name: Install-cmctl | Get goOs
+  ansible.builtin.command: go env GOOS
+  register: goOs
+  when: not st.stat.exists
+
+- name: Install-cmctl | Get goArch
+  ansible.builtin.command: go env GOARCH
+  register: goArch
+  when: not st.stat.exists
+
+- name: Install-cmctl |  Create temporary folder to copy issuer template
+  ansible.builtin.tempfile:
+    state: directory
+    suffix: cmctl
+  register: tempdir
+  when: not st.stat.exists
+
+- name: Install-cmctl | Download cmctl
+  ansible.builtin.get_url:
+    url: "https://github.com/cert-manager/cert-manager/releases/latest/download/cmctl-{{ goOs.stdout }}-{{ goArch.stdout }}.tar.gz"
+    dest: "{{ tempdir.path }}/cmctl.tar.gz"
+    mode: '0640'
+  when: not st.stat.exists
+
+- name: Install-cmctl | Extract cmctl
+  ansible.builtin.unarchive:
+    src: "{{ tempdir.path }}/cmctl.tar.gz"
+    dest: "/usr/local/bin"
+    remote_src: true
+    creates: "/usr/local/bin/cmctl"
+  become: True

tasks/kubernetes.yml

@@ -14,6 +14,11 @@
   register: tempdir
   become: True
 
+- name: Kubernetes | register ipa ca certificate
+  ansible.builtin.slurp:
+    src: /etc/pki/tls/certs/ca-bundle.crt
+  register: kube_certmanager_ipa_ca_bundle
+
 - name: Kubernetes | Copy the cert-manager values file
   ansible.builtin.template:
     src: acme_issuer/cluster-issuer.yml.j2
@@ -23,9 +28,20 @@
     mode: 0644
   become: True
 
+- name: Kubernetes | check certmanager api
+  ansible.builtin.command: cmctl check api
+  register: lsresult
+  until: lsresult.stdout.find("The cert-manager API is ready") != -1
+  retries: 5
+  delay: 10
+  become: True
+
 - name: Kubernetes | Apply issuer file
   kubernetes.core.k8s:
     state: present
+    namespace: cert-manager
     apply: True
     src: "{{ tempdir.path }}/acme_issuer.yml"
+  retries: 30
+  delay: 5
   become: true

tasks/main.yml

@@ -9,7 +9,10 @@
   when:
     - standalone_role
 
-- name: Get idm informations
+- name: Install certmanager cli
+  ansible.builtin.import_tasks: install-cmctl.yml
+
+- name: Get idm information
   ansible.builtin.include_tasks: ipa-facts.yml
   when: kube_masters_group | default("") | string in group_names
 

tox.ini

@@ -9,6 +9,7 @@ env_list =
     dependency
     lint
     create
+    create-monorepo
     converge
     converge-monorepo
     test-exec
@@ -48,12 +49,6 @@ commands =
     yamllint .
     flake8
     ansible-lint
-[testenv:create]
-setenv =
-    DEPENDENCY_ENABLED=False
-deps =
-    -r requirements-dev.txt
-commands = molecule create {posargs}
 [common-ansible-path]
 setenv =
     ANSIBLE_ROLES_PATH={toxinidir}/../community:{toxinidir}/../oss:{toxinidir}/..
@@ -62,6 +57,20 @@ commands =
     mkdir -p {toxinidir}/../community
     mkdir -p {toxinidir}/../oss
     mkdir -p {toxinidir}/../community-collections
+[testenv:create]
+allowlist_externals=mkdir
+setenv =
+    {[common-ansible-path]setenv}
+deps =
+    -r requirements-dev.txt
+commands = molecule create {posargs}
+[testenv:create-monorepo]
+setenv =
+    {[common-ansible-path]setenv}
+    REQUIREMENTS_PATH={toxinidir}/requirements-monorepo.yml
+deps =
+    -r requirements-dev.txt
+commands = molecule create {posargs}
 [testenv:converge-monorepo]
 allowlist_externals=mkdir
 setenv =