feat(kubernetes): stable kubernetes with argo

Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev>

roles/kubernetes_cert_manager/tasks/main.yml

@@ -67,3 +67,11 @@
   tags:
     - cert_manager
     - cluster_issuer
+
+- name: Create Let's Encrypt Certificate
+  kubernetes.core.k8s:
+    state: present
+    definition: "{{ lookup('ansible.builtin.template', 'certificate.yml.j2') | from_yaml }}"
+  tags:
+    - cert_manager
+    - certificate

roles/kubernetes_cert_manager/templates/certificate.yml.j2

@@ -0,0 +1,16 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: k3s-seyshiro-de
+  namespace: cert-manager
+spec:
+  secretName: k3s-seyshiro-de-tls
+  issuerRef:
+    name: {{ cert_manager_issuer_name }}
+    kind: ClusterIssuer
+  commonName: "*.k3s.seyshiro.de"
+  dnsNames:
+    - "k3s.seyshiro.de"
+    - "*.k3s.seyshiro.de"
+

roles/kubernetes_cert_manager/templates/clusterissuer.yml.j2

@@ -1,15 +1,19 @@
+---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
+metadata:
+  name: "{{ cert_manager_issuer_name }}"
 spec:
-    # For staging: https://acme-staging-v02.api.letsencrypt.org/directory
-    # For production: https://acme-v02.api.letsencrypt.org/directory
+  acme:
     server: "{% if cert_manager_issuer_env == 'production' %}https://acme-v02.api.letsencrypt.org/directory{% else %}https://acme-staging-v02.api.letsencrypt.org/directory{% endif %}"
     email: "{{ cert_manager_email }}"
     privateKeySecretRef:
       name: "{{ cert_manager_issuer_name }}-account-key"
-
     solvers:
-    - dns01:
+    - selector:
+        dnsZones:
+          - 'k3s.seyshiro.de'
+      dns01:
         webhook:
             groupName: com.netcup.webhook
             solverName: netcup