diff options
author | Russell Teague <rteague@redhat.com> | 2017-12-01 09:24:45 -0500 |
---|---|---|
committer | Russell Teague <rteague@redhat.com> | 2017-12-01 09:36:34 -0500 |
commit | 0b80aca421a89b10a8254f03e1339d1ddfbd54f1 (patch) | |
tree | 1f17891d099e615b6f22fc169a2f9d4a7e3e1540 /playbooks/openshift-master/private/certificates-backup.yml | |
parent | fdf3edec3f880d21e19e2007065be3ed0ed59a13 (diff) | |
download | openshift-0b80aca421a89b10a8254f03e1339d1ddfbd54f1.tar.gz openshift-0b80aca421a89b10a8254f03e1339d1ddfbd54f1.tar.bz2 openshift-0b80aca421a89b10a8254f03e1339d1ddfbd54f1.tar.xz openshift-0b80aca421a89b10a8254f03e1339d1ddfbd54f1.zip |
Playbook Consolidation - Redeploy Certificates
Diffstat (limited to 'playbooks/openshift-master/private/certificates-backup.yml')
-rw-r--r-- | playbooks/openshift-master/private/certificates-backup.yml | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/playbooks/openshift-master/private/certificates-backup.yml b/playbooks/openshift-master/private/certificates-backup.yml new file mode 100644 index 000000000..4dbc041b0 --- /dev/null +++ b/playbooks/openshift-master/private/certificates-backup.yml @@ -0,0 +1,38 @@ +--- +- name: Backup and remove master cerftificates + hosts: oo_masters_to_config + any_errors_fatal: true + vars: + openshift_ca_host: "{{ groups.oo_first_master.0 }}" + openshift_master_count: "{{ openshift.master.master_count | default(groups.oo_masters | length) }}" + pre_tasks: + - stat: + path: "{{ openshift.common.config_base }}/generated-configs" + register: openshift_generated_configs_dir_stat + - name: Backup generated certificate and config directories + command: > + tar -czvf /etc/origin/master-node-cert-config-backup-{{ ansible_date_time.epoch }}.tgz + {{ openshift.common.config_base }}/generated-configs + {{ openshift.common.config_base }}/master + when: openshift_generated_configs_dir_stat.stat.exists + delegate_to: "{{ openshift_ca_host }}" + run_once: true + - name: Remove generated certificate directories + file: + path: "{{ item }}" + state: absent + with_items: + - "{{ openshift.common.config_base }}/generated-configs" + - name: Remove generated certificates + file: + path: "{{ openshift.common.config_base }}/master/{{ item }}" + state: absent + with_items: + - "{{ hostvars[inventory_hostname] | certificates_to_synchronize(include_keys=false, include_ca=false) }}" + - "etcd.server.crt" + - "etcd.server.key" + - "master.server.crt" + - "master.server.key" + - "openshift-master.crt" + - "openshift-master.key" + - "openshift-master.kubeconfig" |