Kubespray and configure default-ssl cert ingress-nginx

[cello86]

What happened?

The configuration ingress_nginx_extra_args present into inventory/sample/group_vars/k8s_cluster/addons.yml permits to configure the defautls-ss-certificate for the ingress-nginx controller but it's not possible to load from kubespray the secret tls for this certificate.

What did you expect to happen?

I expect to be able to configure a custom certificate to handle wildcard pointing of the ingress controller from kubespray.

How can we reproduce it (as minimally and precisely as possible)?

Nope

OS

Linux 5.14.0-362.24.1.el9_3.x86_64 x86_64
NAME="Red Hat Enterprise Linux"
VERSION="9.3 (Plow)"
ID="rhel"
ID_LIKE="fedora"
VERSION_ID="9.3"
PLATFORM_ID="platform:el9"
PRETTY_NAME="Red Hat Enterprise Linux 9.3 (Plow)"
ANSI_COLOR="0;31"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:redhat:enterprise_linux:9::baseos"
HOME_URL="https://www.redhat.com/"
DOCUMENTATION_URL="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9"
BUG_REPORT_URL="https://bugzilla.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 9"
REDHAT_BUGZILLA_PRODUCT_VERSION=9.3
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="9.3"

Version of Ansible

ansible [core 2.15.10]
  config file = /root/kubespray-2.24.1/ansible.cfg
  configured module search path = ['/root/kubespray-2.24.1/library']
  ansible python module location = /usr/local/lib/python3.9/site-packages/ansible
  ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
  executable location = /usr/local/bin/ansible
  python version = 3.9.18 (main, Jan  4 2024, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)] (/usr/bin/python3)
  jinja version = 3.1.2
  libyaml = True

Version of Python

Python 3.9.18

Version of Kubespray (commit)

release-2.24

Network plugin used

calico

Full inventory with variables

Nope

Command used to invoke ansible

ansible-playbook -i inventory/testcluster/hosts.ini cluster.yml

Output of ansible run

Nope

Anything else we need to know

No response