diff options
| author | Andrew Butcher <abutcher@redhat.com> | 2017-02-09 10:49:33 -0500 |
|---|---|---|
| committer | Andrew Butcher <abutcher@redhat.com> | 2017-02-09 10:49:33 -0500 |
| commit | b0ca3ea0a2ffd7917650ca648c940746b8a7825a (patch) | |
| tree | 7f6f9f241732869a48b3ff5b8827e0ad0cedce4b /playbooks | |
| parent | fc96d8d22f6c277b599e6e2fa4e9cc06814a9460 (diff) | |
| download | openshift-b0ca3ea0a2ffd7917650ca648c940746b8a7825a.tar.gz openshift-b0ca3ea0a2ffd7917650ca648c940746b8a7825a.tar.bz2 openshift-b0ca3ea0a2ffd7917650ca648c940746b8a7825a.tar.xz openshift-b0ca3ea0a2ffd7917650ca648c940746b8a7825a.zip | |
Ensure embedded etcd config uses CA bundle.
Diffstat (limited to 'playbooks')
| -rw-r--r-- | playbooks/common/openshift-cluster/redeploy-certificates/ca.yml | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/ca.yml b/playbooks/common/openshift-cluster/redeploy-certificates/ca.yml index 0b1c39ba4..9d4d3ea26 100644 --- a/playbooks/common/openshift-cluster/redeploy-certificates/ca.yml +++ b/playbooks/common/openshift-cluster/redeploy-certificates/ca.yml @@ -160,6 +160,27 @@ yaml_key: servingInfo.clientCA yaml_value: ca-bundle.crt when: (g_master_config_output.content|b64decode|from_yaml).servingInfo.clientCA != 'ca-bundle.crt' + - modify_yaml: + dest: "{{ openshift.common.config_base }}/master/master-config.yaml" + yaml_key: etcdClientInfo.ca + yaml_value: ca-bundle.crt + when: + - groups.oo_etcd_to_config | default([]) | length == 0 + - (g_master_config_output.content|b64decode|from_yaml).etcdClientInfo.ca != 'ca-bundle.crt' + - modify_yaml: + dest: "{{ openshift.common.config_base }}/master/master-config.yaml" + yaml_key: etcdConfig.peerServingInfo.clientCA + yaml_value: ca-bundle.crt + when: + - groups.oo_etcd_to_config | default([]) | length == 0 + - (g_master_config_output.content|b64decode|from_yaml).etcdConfig.peerServingInfo.clientCA != 'ca-bundle.crt' + - modify_yaml: + dest: "{{ openshift.common.config_base }}/master/master-config.yaml" + yaml_key: etcdConfig.servingInfo.clientCA + yaml_value: ca-bundle.crt + when: + - groups.oo_etcd_to_config | default([]) | length == 0 + - (g_master_config_output.content|b64decode|from_yaml).etcdConfig.servingInfo.clientCA != 'ca-bundle.crt' - name: Copy current OpenShift CA to legacy directory hosts: oo_masters_to_config |