Manage letsencrypt certificates with cert-manager

roles/k8s-manifests/tasks/searx.yml

@@ -58,12 +58,40 @@
       kind: Ingress
       metadata:
         name: searx
+        annotation:
+          traefik.ingress.kubernetes.io/redirect-entry-point: https
+          traefik.ingress.kubernetes.io/redirect-permanent: "true"
+          ingress.kubernetes.io/ssl-redirect: "true"
+          ingress.kubernetes.io/ssl-temporary-redirect: "false"
       spec:
         rules:
-        - host: searx.k8s.banditlair.com
+        - host: "{{searx_domain}}"
           http:
             paths:
             - path: /
               backend:
                 serviceName: searx
                 servicePort: 80
+        tls:
+          - secretName: searx-cert
+
+- name: Searx certificate
+  k8s:
+    namespace: default
+    state: present
+    definition:
+      apiVersion: certmanager.k8s.io/v1alpha1
+      kind: Certificate
+      metadata:
+        name: searx-cert
+      spec:
+        secretName: traefik-cert
+        issuerRef:
+          name: "{{cert_manager_issuer}}"
+        commonName:  "{{searx_domain}}"
+        acme:
+          config:
+          - http01:
+              ingressClass: traefik
+            domains:
+            -  "{{searx_domain}}"