---
- name: Reconcile Helm, cert-manager, and the Let's Encrypt issuer
  hosts: k3s_servers
  become: true
  gather_facts: false
  serial: 1
  roles:
    - role: helm_client
      tags: [helm, matrix, mutating]
    - role: cert_manager
      tags: [cert_manager, matrix, mutating]