epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fixing condition where CA already exists

Browse Source
This commit is contained in:
Brad Beam
2017-09-13 03:38:11 +00:00
parent f29a42721f
commit 0a89f88b89
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/vault/tasks/shared/gen_ca.yml
View File

@@ -12,6 +12,7 @@
method: POST method: POST
body_format: json body_format: json
body: "{{ gen_ca_vault_options }}" body: "{{ gen_ca_vault_options }}"
status_code: 200,204
register: vault_ca_gen register: vault_ca_gen
delegate_to: "{{ groups.vault|first }}" delegate_to: "{{ groups.vault|first }}"
run_once: true run_once: true
@@ -21,9 +22,11 @@
content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['certificate'] }}" content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['certificate'] }}"
dest: "{{ gen_ca_cert_dir }}/ca.pem" dest: "{{ gen_ca_cert_dir }}/ca.pem"
mode: 0644 mode: 0644
when: vault_ca_gen.status == 200
- name: "bootstrap/gen_ca | Copy {{ gen_ca_mount_path }} root CA key locally" - name: "bootstrap/gen_ca | Copy {{ gen_ca_mount_path }} root CA key locally"
copy: copy:
content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['private_key'] }}" content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['private_key'] }}"
dest: "{{ gen_ca_cert_dir }}/ca-key.pem" dest: "{{ gen_ca_cert_dir }}/ca-key.pem"
mode: 0640 mode: 0640
when: vault_ca_gen.status == 200