system-config/playbooks/host_vars
Ian Wienand 733122f0df Use handlers for letsencrypt cert updates
This change proposes calling a handler each time a certificate is
created/updated.  The handler name is based on the name of the
certificate given in the letsencrypt_certs variable, as described in
the role documentation.

Because Ansible considers calling a handler with no listeners an error
this means each letsencrypt user will need to provide a handler.

One simple option illustrated here is just to produce a stamp file.
This can facilitate cross-playbook and even cross-orchestration-tool
communication.  For example, puppet or other ansible playbooks can
detect this stamp file and schedule their reloads, etc. then remove
the stamp file.  It is conceivable more complex listeners could be
setup via other roles, etc. should the need arise.

A test is added to make sure the stamp file is created for the
letsencrypt test hosts, which are always generating a new certificate
in the gate test.

Change-Id: I4e0609c4751643d6e0c8d9eaa38f184e0ce5452e
2019-05-14 08:14:51 +10:00
..
adns1.opendev.org.yaml Set ansible python version for opendev nameservers 2018-11-01 09:20:26 -07:00
bridge.openstack.org.yaml Add zuul user to bridge.openstack.org 2019-03-04 14:47:51 -08:00
graphite01.opendev.org.yaml Use handlers for letsencrypt cert updates 2019-05-14 08:14:51 +10:00
insecure-ci-registry01.opendev.org.yaml Handle registry role running under py3 2019-02-08 09:13:06 -08:00
lists.katacontainers.io.yaml Merge "Remove base.yaml things from openstack_project::server" 2018-08-17 10:43:53 +00:00
lists.openstack.org.yaml Blackhole spam for airship-discuss-owner address 2019-04-23 18:12:11 +00:00
ns1.opendev.org.yaml Set ansible python version for opendev nameservers 2018-11-01 09:20:26 -07:00
ns2.opendev.org.yaml Set ansible python version for opendev nameservers 2018-11-01 09:20:26 -07:00