$ IMG=registry.example.com/ansible/awx-operator:certs make docker-build docker-push deploy

$ cat minimal-awx.yaml 
---
apiVersion: awx.ansible.com/v1beta1
kind: AWX
metadata:
  namespace: awx
  name: awx-demo
spec:
  service_type: nodeport

$ kubectl apply -f minimal-awx.yaml 

$ cat minimal-meshingress.yaml 
---
apiVersion: awx.ansible.com/v1alpha1
kind: AWXMeshIngress
metadata:
  namespace: awx
  name: inbound-hop01
spec:
  deployment_name: awx-demo

  ingress_type: IngressRouteTCP
  ingress_controller: traefik
  ingress_class_name: traefik
  ingress_api_version: traefik.io/v1alpha1

  external_hostname: inbound-hop01.ansible.internal

$ kubectl apply -f minimal-meshingress.yaml 

$ kubectl -n awx exec deployment/awx-demo-task -c awx-demo-ee -- openssl x509 -text -in /etc/receptor/tls/receptor.crt -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709483251 (0x65e4a4f3)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = awx-demo Receptor Root CA
        Validity
            Not Before: Mar  3 16:27:31 2024 GMT
            Not After : Mar  3 16:27:31 2034 GMT   ✅
...

$ kubectl -n awx exec -it deployment/inbound-hop01 -- openssl x509 -text -in /etc/receptor/tls/receptor.crt -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709484394 (0x65e4a96a)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = awx-demo Receptor Root CA
        Validity
            Not Before: Mar  3 16:46:34 2024 GMT
            Not After : Mar  3 16:46:34 2034 GMT   ✅
...