summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml
diff options
context:
space:
mode:
authorAndrew Butcher <abutcher@redhat.com>2017-09-06 10:21:50 -0400
committerAndrew Butcher <abutcher@redhat.com>2017-10-02 10:05:44 -0400
commitd8d0e6d7de600d6896014fef928da5bf133dc85e (patch)
tree1b8b802ad1629b5cf23f3e3656d0ee1d7ef76d01 /playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml
parent54ea443f4ad24ad311c0a036cf283f9e39c865ee (diff)
downloadopenshift-d8d0e6d7de600d6896014fef928da5bf133dc85e.tar.gz
openshift-d8d0e6d7de600d6896014fef928da5bf133dc85e.tar.bz2
openshift-d8d0e6d7de600d6896014fef928da5bf133dc85e.tar.xz
openshift-d8d0e6d7de600d6896014fef928da5bf133dc85e.zip
Separate certificate playbooks.
Diffstat (limited to 'playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml')
-rw-r--r--playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml16
1 files changed, 6 insertions, 10 deletions
diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml b/playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml
index b54acae6c..12cd209d2 100644
--- a/playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml
+++ b/playbooks/common/openshift-cluster/redeploy-certificates/openshift-ca.yml
@@ -105,25 +105,21 @@
- "ca.serial.txt"
- "ca-bundle.crt"
-- name: Generate new OpenShift CA certificate
+- name: Create temporary directory for creating new CA certificate
hosts: oo_first_master
- pre_tasks:
+ tasks:
- name: Create temporary directory for creating new CA certificate
command: >
mktemp -d /tmp/openshift-ansible-XXXXXXX
register: g_new_openshift_ca_mktemp
changed_when: false
- roles:
- - role: openshift_ca
+
+- include: ../../openshift-master/ca.yml
+ vars:
# Set openshift_ca_config_dir to a temporary directory where CA
# will be created. We'll replace the existing CA with the CA
# created in the temporary directory.
- openshift_ca_config_dir: "{{ g_new_openshift_ca_mktemp.stdout }}"
- openshift_ca_host: "{{ groups.oo_first_master.0 }}"
- openshift_master_hostnames: "{{ hostvars
- | oo_select_keys(groups['oo_masters_to_config'] | default([]))
- | oo_collect('openshift.common.all_hostnames')
- | oo_flatten | unique }}"
+ openshift_ca_config_dir: "{{ hostvars[groups.oo_first_master.0].g_new_openshift_ca_mktemp.stdout }}"
- name: Create temp directory for syncing certs
hosts: localhost