File tree Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Original file line number Diff line number Diff line change 7
7
8
8
tasks :
9
9
- name : Copy certificate on RedHat family systems (Rocky, RHEL, CentOS)
10
- copy :
10
+ ansible.builtin. copy :
11
11
src : " {{ cert_path }}"
12
12
dest : " /etc/pki/ca-trust/source/anchors/OS-TLS-ROOT.pem"
13
13
mode : " 0644"
14
14
when : ansible_facts.os_family == 'RedHat'
15
15
16
16
- name : Update CA trust on RedHat family systems
17
- command : " update-ca-trust"
17
+ ansible.builtin. command : " update-ca-trust"
18
18
when : ansible_facts.os_family == 'RedHat'
19
19
20
20
- name : Copy certificate on Debian family systems (Ubuntu, Debian)
21
- copy :
21
+ ansible.builtin. copy :
22
22
src : " {{ cert_path }}"
23
23
dest : " /usr/local/share/ca-certificates/OS-TLS-ROOT.crt"
24
24
mode : " 0644"
25
25
when : ansible_facts.os_family == 'Debian'
26
26
27
27
- name : Update CA trust on Debian family systems
28
- command : " update-ca-certificates"
28
+ ansible.builtin. command : " update-ca-certificates"
29
29
when : ansible_facts.os_family == 'Debian'
Original file line number Diff line number Diff line change 7
7
vault_intermediate_ca_name : " OS-TLS-INT"
8
8
tasks :
9
9
- name : Include Vault keys
10
- include_vars :
10
+ ansible.builtin. include_vars :
11
11
file : " {{ kayobe_env_config_path }}/vault/overcloud-vault-keys.json"
12
12
name : vault_keys
13
13
14
- - name : Issue a certificate for pulp TLS
14
+ - name : Issue a certificate for pulp TLS # noqa: fqcn
15
15
hashivault_pki_cert_issue :
16
16
url : " {{ vault_api_addr }}"
17
17
ca_cert : " {{ '/etc/pki/tls/certs/ca-bundle.crt' if ansible_facts.os_family == 'RedHat' else '/usr/local/share/ca-certificates/OS-TLS-ROOT.crt' }}"
27
27
https_proxy : ' '
28
28
29
29
- name : Ensure pulp certificates directory exists
30
- file :
30
+ ansible.builtin. file :
31
31
path : " {{ kayobe_env_config_path }}/pulp/certificates"
32
32
state : directory
33
33
delegate_to : localhost
34
34
35
35
- name : Copy pulp TLS certificate (including intermediate)
36
36
no_log : true
37
- copy :
37
+ ansible.builtin. copy :
38
38
dest : " {{ kayobe_env_config_path }}/pulp/certificates/pulp.crt"
39
39
content : |
40
40
{{ pulp_cert.data.certificate }}
44
44
45
45
- name : Copy pulp private key
46
46
no_log : true
47
- copy :
47
+ ansible.builtin. copy :
48
48
dest : " {{ kayobe_env_config_path }}/pulp/certificates/pulp.key"
49
49
content : " {{ pulp_cert.data.private_key }}"
50
50
mode : 0600
51
51
delegate_to : localhost
52
52
53
- - import_playbook : copy-ca-to-hosts.yml
53
+ - name : Copy CA to hosts playbook
54
+ import_playbook : copy-ca-to-hosts.yml
You can’t perform that action at this time.
0 commit comments