kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/vault/tasks/bootstrap/sync_vault_certs.yml

31 lines
923 B
YAML
Raw Normal View History

Adding the Vault role
2017-01-14 04:31:10 +08:00
---
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible.
2018-01-29 19:37:48 +08:00
- include_tasks: ../shared/sync_file.yml
Adding the Vault role
2017-01-14 04:31:10 +08:00
vars:
sync_file: "ca.pem"
sync_file_dir: "{{ vault_cert_dir }}"
sync_file_hosts: "{{ groups.vault }}"
sync_file_is_cert: true
Vault security hardening and role isolation
2017-02-09 05:41:36 +08:00
- name: bootstrap/sync_vault_certs | Set facts for vault sync_file results
Adding the Vault role
2017-01-14 04:31:10 +08:00
set_fact:
Vault security hardening and role isolation
2017-02-09 05:41:36 +08:00
vault_ca_cert_needed: "{{ sync_file_results[0]['no_srcs'] }}"
Adding the Vault role
2017-01-14 04:31:10 +08:00
- name: bootstrap/sync_vault_certs | Unset sync_file_results after ca.pem sync
set_fact:
sync_file_results: []
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible.
2018-01-29 19:37:48 +08:00
- include_tasks: ../shared/sync_file.yml
Adding the Vault role
2017-01-14 04:31:10 +08:00
vars:
sync_file: "api.pem"
sync_file_dir: "{{ vault_cert_dir }}"
sync_file_hosts: "{{ groups.vault }}"
sync_file_is_cert: true
- name: bootstrap/sync_vault_certs | Set fact if Vault's API cert is needed
set_fact:
Vault security hardening and role isolation
2017-02-09 05:41:36 +08:00
vault_api_cert_needed: "{{ sync_file_results[0]['no_srcs'] }}"
Adding the Vault role
2017-01-14 04:31:10 +08:00
- name: bootstrap/sync_vault_certs | Unset sync_file_results after api.pem sync
set_fact:
sync_file_results: []