Disable Harbor tls (rely on Traefik);Configure Traefik with custom certResolver;Retrieve & install root ca in truststore

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml

@@ -116,6 +116,22 @@
     kubeconfig: "{{ kubeconfig.path }}"
     values: "{{ components.stepcertificates.chart_values }}"
 
+- name: Retrieve step-ca configuration
+  kubernetes.core.k8s_log:
+    kind: Job
+    name: step-certificates
+    namespace: step-ca
+    kubeconfig: "{{ kubeconfig.path }}"
+  register: stepca_bootstraplog
+
+- name: Install root CA in system truststore
+  ansible.builtin.shell:
+    cmd: |
+      step ca bootstrap \
+        --ca-url={{ stepca_bootstraplog.log | regex_search('CA URL: (.+)', '\\1') | first }} \
+        --fingerprint={{ stepca_bootstraplog.log | regex_search('CA Fingerprint: (.+)', '\\1') | first }} \
+        --install
+
 - name: Install harbor chart
   kubernetes.core.helm:
     name: harbor