metallb: fix for kubernetes running without kube-proxy

cert-manager: bump to v1.12.4, helm chart v1.12.4

metallb: bump to v0.13.11, helm chart v0.13.11

inventory/ghp/sample/group_vars/all/versions.yaml

@@ -1,5 +1,5 @@
 # MetalLB balancer
-metallb_version: 0.13.10
+metallb_version: 0.13.11
 
 # NFS provisioners
 nfs_client_provisioner_hdd_version: 4.0.18
@@ -12,7 +12,7 @@ ceph_csi_rbd_version: 3.8.0
 ceph_csi_cephfs_version: 3.8.0
 
 # Cert-manager
-cert_manager_version: 1.12.2
+cert_manager_version: 1.12.4
 
 # External-DNS
 external_dns_version: 6.8.1
@@ -36,7 +36,7 @@ openldap_version: 1.2.7
 minio_version: 5.0.13
 
 # Adguard Home
-adguard_version: 2.3.18
+adguard_version: 2.3.19
 
 # Bitwarden (aka Vaultwarden)
 bitwarden_version: 2.0.21

roles/metallb/tasks/main.yaml

@@ -11,15 +11,25 @@
     release_values: "{{ metallb_combined_values | from_yaml }}"
     wait: true
 
+- name: Check if kube-proxy ConfigMap exist
+  check_mode: false
+  shell: |
+    kubectl get configmap kube-proxy -n kube-system
+  register: _kube_proxy_configmap
+  failed_when: false
+  changed_when: false
+
 - name: Check for strict arp
   check_mode: false
   shell: |
     kubectl get configmap kube-proxy -n kube-system -o yaml | \
     sed -e "s/strictARP: false/strictARP: true/" | \
     kubectl diff -f - -n kube-system
-  register: check_strict_arp
-  when: metallb_strict_arp
-  changed_when: check_strict_arp.rc != 0
+  register: check_strict_arp_status
+  when: 
+    - _kube_proxy_configmap.rc == 0
+    - metallb_strict_arp
+  changed_when: check_strict_arp_status.rc != 0
 
 - name: Apply strict arp
   shell: |
@@ -28,8 +38,9 @@
     kubectl apply -f - -n kube-system \
     && kubectl -n kube-system delete pods --selector=k8s-app=kube-proxy
   when: 
-    - strict_arp_for_metallb
-    - metallb_strict_arp.changed
+    - _kube_proxy_configmap.rc == 0
+    - metallb_strict_arp
+    - metallb_strict_arp_status.changed
 
 - name: Apply MetalLB L2 definitions
   k8s: