475edcbe98
We've seen the certcheck list building loop fail because some host doesn't ahve the appropriate var in its hostvars. Unfortunately ansible logging doesn't record the value of the list iteration item when an iteration fails. It only records this value when it succeeds.... Work around this with our own debugging output. Additionally use a unique loop_var value in case we're hitting some sort of 'item' name collision problem. It is just good practice to avoid 'item' anyway. Change-Id: Ia3ed089187e0b8397413fbb989c44906d56811ae |
||
---|---|---|
.. | ||
defaults | ||
tasks | ||
templates | ||
README.rst |
Generate SSL check list
This role automatically generates a list of domains for the certificate validation checks. This ensures our certificates are valid and are being renewed as expected.
This role must run after letsencrypt-request-certs
role,
as that builds the letsencrypt_certcheck_domains
variable
for each host and certificate. It must also run on a host that has
already run the install-certcheck
role.
Role Variables