Merge branch...

Merge branch '357-the-server-is-currently-unable-to-handle-the-request-while-installing-local-storage-helmfile' into 'master'

Update cert-manager to 0.11.0

Closes #382

See merge request openappstack/openappstack!122

ansible/group_vars/all/oas.yml

@@ -59,7 +59,7 @@ cert_manager:
   # cert-manager requires custom resource definitions applied before installing
   # the helm chart. See https://hub.helm.sh/charts/jetstack/cert-manager for
   # details
-  crd_version: '0.9'
+  crd_version: '0.11.0'
 
 prometheus:
   crd_version: 'v0.34.0'

ansible/roles/apps/tasks/cert-manager.yml

@@ -2,7 +2,8 @@
 - name: Install CRDs for cert-manager
   tags:
     - cert-manager
-  command: '/snap/bin/kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-{{ cert_manager.crd_version }}/deploy/manifests/00-crds.yaml'
+  # TODO: Remove `--validate=false` once we use Kubernetes 1.16 or above
+  command: '/snap/bin/kubectl apply --validate=false -f https://raw.githubusercontent.com/jetstack/cert-manager/v{{ cert_manager.crd_version }}/deploy/manifests/00-crds.yaml'
 
 - name: Prevent validation deadlock for cert-manager
   tags:
@@ -20,7 +21,7 @@
   k8s:
     state: present
     definition:
-      apiVersion: certmanager.k8s.io/v1alpha1
+      apiVersion: cert-manager.io/v1alpha2
       kind: ClusterIssuer
       metadata:
         name: letsencrypt-{{ item.name }}
@@ -32,7 +33,11 @@
             # Secret resource used to store the account's private key.
             name: letsencrypt-{{ item.name }}-account-key
           # Enable the HTTP01 challenge mechanism for this Issuer
-          http01: {}
+          solvers:
+          - selector: {}
+            http01:
+              ingress:
+                class: nginx
     merge_type: merge
   with_items:
     - name: staging

ansible/roles/apps/tasks/init.yml

@@ -5,6 +5,9 @@
     - git
     - helm
     - helmfile
+    - cert-manager
+    - prometheus
+    - nextcloud
   synchronize:
     src: '../../helmfiles'
     dest: '{{ data_directory }}/source'

helmfiles/helmfile.d/05-cert-manager.yaml

@@ -11,7 +11,7 @@ releases:
   - name: "oas-{{ .Environment.Values.releaseName }}-cert-manager"
     namespace: "cert-manager"
     chart: "jetstack/cert-manager"
-    version: "0.9.1"
+    version: "0.11.0"
     values:
     - "../values/cert-manager.yaml.gotmpl"
     wait: false