Add k8s manifests for cert-manager issuers and searx

roles/k8s-manifests/tasks/cert-manager.yml

@@ -1,27 +1,25 @@
 - name: cert-manager issuers
   k8s:
     state: present
-    namespace: "{{item.1}}"
+    namespace: "{{item.name}}"
     definition:
       apiVersion: certmanager.k8s.io/v1alpha1
-      kind: Issuer
+      kind: ClusterIssuer
       metadata:
-        name: "{{item.0.name}}"
+        name: "{{item.name}}"
       spec:
         acme:
           # The ACME server URL
-          server: "{{item.0.server}}"
+          server: "{{item.server}}"
           # Email address used for ACME registration
           email: "{{letsencrypt_email}}"
           # Name of a secret used to store the ACME account private key
           privateKeySecretRef:
-            name: "{{item.0.name}}"
+            name: "{{item.name}}"
           # Enable HTTP01 validations
           http01: {}
-  with_nested:
-    - - name: letsencrypt-production
-        server: https://acme-v02.api.letsencrypt.org/directory
-      - name: letsencrypt-staging
-        server: https://acme-staging-v02.api.letsencrypt.org/directory
-    - - default
-      - kube-system
+  with_items:
+    - name: letsencrypt-production
+      server: https://acme-v02.api.letsencrypt.org/directory
+    - name: letsencrypt-staging
+      server: https://acme-staging-v02.api.letsencrypt.org/directory