infra/ansible-role-certificates
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added support to override backend values on a per certificate basis

Browse source
This commit is contained in:
nd 2020-04-26 12:03:11 +02:00
parent abb03d4435
commit a76851a021
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
4 changed files with 22 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

7
tasks/common_cert.yml
View file

@ -8,11 +8,16 @@
chainpath: "{{ basepath + '/' + certname + '.chain.crt' }}"
fullpath: "{{ basepath + '/private/' + certname + '.complete.pem' }}"
- set_fact:
cert: "{{ {}|combine(certificates.defaults, cert_paths, certificates.certs[certname]|d({}), {'name': certname} ) }}"
cert: "{{ {}|combine(certificates.defaults, cert_paths, certificates.certs[certname]|d({}), {'name': certname}, recursive=True ) }}"
- set_fact:
cert_backend: "{{ {}|combine(certificates.backends[cert.backend], cert.backend_override|d({}), recursive=True) }}"
- debug:
verbosity: 1
var: cert
- debug:
verbosity: 1
var: cert_backend
- name: "generate key for {{ certname }}"
openssl_privatekey: