From 28bcb25d55fab7f4fe0c8b3cd1a260057f163b62 Mon Sep 17 00:00:00 2001 From: Scott Dodson Date: Fri, 7 Apr 2017 18:20:23 -0400 Subject: Use openshift_ca_host's hostnames to sign the CA If for some reason oo_first_master and openshift_ca_host are different we could've signed the CA with the wrong hostnames. --- roles/openshift_ca/tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'roles/openshift_ca/tasks') diff --git a/roles/openshift_ca/tasks/main.yml b/roles/openshift_ca/tasks/main.yml index 3b17d9ed6..c7b906949 100644 --- a/roles/openshift_ca/tasks/main.yml +++ b/roles/openshift_ca/tasks/main.yml @@ -95,7 +95,7 @@ {% for legacy_ca_certificate in g_master_legacy_ca_result.files | default([]) | oo_collect('path') %} --certificate-authority {{ legacy_ca_certificate }} {% endfor %} - --hostnames={{ openshift.common.all_hostnames | join(',') }} + --hostnames={{ hostvars[openshift_ca_host].openshift.common.all_hostnames | join(',') }} --master={{ openshift.master.api_url }} --public-master={{ openshift.master.public_api_url }} --cert-dir={{ openshift_ca_config_dir }} -- cgit v1.2.1