diff --git a/ansible/roles/apps/tasks/cert-manager.yml b/ansible/roles/apps/tasks/cert-manager.yml
index f538e72dc4e09a576998ddb67250b9738884ef12..25bc6d9909ca7927052f89fa589c69a38b090a4b 100644
--- a/ansible/roles/apps/tasks/cert-manager.yml
+++ b/ansible/roles/apps/tasks/cert-manager.yml
@@ -39,3 +39,17 @@
       server: "https://acme-staging-v02.api.letsencrypt.org/directory"
     - name: production
       server: "https://acme-v02.api.letsencrypt.org/directory"
+
+- name: Apply cert-manager helmfile
+  tags:
+    - helmfile
+    - cert-manager
+  shell: |
+    /usr/local/bin/helmfile \
+    -b /snap/bin/helm \
+    -e oas \
+    -f {{ data_directory }}/source/helmfiles/helmfile.d/05-cert-manager.yaml \
+    apply \
+    --suppress-secrets \
+    | sed 's/\x1B\[[0-9;]*[JKmsu]//g' \
+    >> {{ log_directory }}/helmfile.log