|
12 | 12 | key_usage: |
13 | 13 | - keyCertSign |
14 | 14 | key_usage_critical: true |
15 | | - register: ca_csr |
| 15 | + register: ovn_ca_csr |
16 | 16 | notify: Issue CA certificate |
17 | 17 | throttle: 1 |
18 | 18 |
|
19 | 19 | - name: Issue CA certificate |
20 | 20 | delegate_to: 127.0.0.1 |
21 | 21 | community.crypto.x509_certificate: |
22 | 22 | path: "{{ ovn_config_dir }}/ca.crt" |
23 | | - csr_content: "{{ ca_csr.csr }}" |
| 23 | + csr_content: "{{ ovn_ca_csr.csr }}" |
24 | 24 | privatekey_path: "{{ ovn_config_dir }}/ca.key" |
25 | 25 | provider: selfsigned |
26 | 26 | throttle: 1 |
|
31 | 31 | privatekey_path: "{{ ovn_config_dir }}/{{ inventory_hostname }}.key" |
32 | 32 | common_name: "OVN certificate for {{ inventory_hostname }}" |
33 | 33 | use_common_name_for_san: false |
34 | | - register: cert_csr |
| 34 | + register: ovn_cert_csr |
35 | 35 | notify: Issue server certificate |
36 | 36 |
|
37 | 37 | - name: Issue server certificate |
38 | 38 | delegate_to: 127.0.0.1 |
39 | 39 | community.crypto.x509_certificate: |
40 | 40 | path: "{{ ovn_config_dir }}/{{ inventory_hostname }}.crt" |
41 | | - csr_content: "{{ cert_csr.csr }}" |
| 41 | + csr_content: "{{ ovn_cert_csr.csr }}" |
42 | 42 | ownca_path: "{{ ovn_config_dir }}/ca.crt" |
43 | 43 | ownca_privatekey_path: "{{ ovn_config_dir }}/ca.key" |
44 | 44 | ownca_not_after: "+3650d" |
|
52 | 52 | privatekey_path: "{{ ovn_config_dir }}/{{ item.item }}.key" |
53 | 53 | common_name: "OVN client certificate for {{ item.item }}" |
54 | 54 | use_common_name_for_san: false |
55 | | - register: client_csr |
| 55 | + register: ovn_client_csr |
56 | 56 | notify: Issue client certificate |
57 | 57 | loop: "{{ ovn_client_key.results }}" |
58 | 58 |
|
|
66 | 66 | ownca_not_after: "+3650d" |
67 | 67 | ownca_not_before: "-1d" |
68 | 68 | provider: ownca |
69 | | - loop: "{{ client_csr.results }}" |
| 69 | + loop: "{{ ovn_client_csr.results }}" |
70 | 70 | throttle: 1 |
0 commit comments