mirror of https://github.com/ceph/ceph-ansible.git
53 lines
1.6 KiB
YAML
53 lines
1.6 KiB
YAML
---
|
|
- name: set_fact crt_files
|
|
set_fact:
|
|
crt_files:
|
|
- "iscsi-gateway.crt"
|
|
- "iscsi-gateway.key"
|
|
- "iscsi-gateway.pem"
|
|
- "iscsi-gateway-pub.key"
|
|
|
|
- name: stat for crt file(s)
|
|
local_action:
|
|
module: stat
|
|
path: "{{ fetch_directory }}/{{ fsid }}/{{ item }}"
|
|
with_items: "{{ crt_files }}"
|
|
changed_when: false
|
|
failed_when: false
|
|
check_mode: no
|
|
register: crt_files_exist
|
|
|
|
- name: create ssl crt/key files
|
|
local_action:
|
|
module: shell openssl req -newkey rsa:2048 -nodes -keyout {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key -x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt -subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
|
|
run_once: True
|
|
with_items: "{{ crt_files_exist.results }}"
|
|
when:
|
|
- item.stat.exists == false
|
|
|
|
- name: create pem
|
|
local_action:
|
|
module: shell cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
|
run_once: True
|
|
register: pem
|
|
with_items: "{{ crt_files_exist.results }}"
|
|
when:
|
|
- item.stat.exists == false
|
|
|
|
- name: create public key from pem
|
|
local_action:
|
|
module: shell openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem -pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key
|
|
run_once: True
|
|
when:
|
|
- pem.changed
|
|
|
|
- name: copy crt file(s) to gateway nodes
|
|
copy:
|
|
src: "{{ fetch_directory }}/{{ fsid }}/{{ item }}"
|
|
dest: "/etc/ceph/{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: 0400
|
|
changed_when: false
|
|
with_items: "{{ crt_files }}"
|