openstack/ansible-role-pki
Code Issues Proposed changes

Merge "Ensure key and certificate regenerated when pki_regen_cert is defined"

Browse Source
This commit is contained in:
Zuul 2021-11-11 22:25:42 +00:00 committed by Gerrit Code Review
commit 642541f9cc
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tasks/standalone/create_cert.yml
View File

@ -25,6 +25,7 @@
- name: Generate certificate private key for {{ cert.name }}
openssl_privatekey:
path: "{{ cert_dir ~ '/private/' ~ cert.name ~ '.key.pem' }}"
force: "{{ pki_regen_cert == cert.name or ((pki_regen_cert | lower) == 'true') }}"
register: cert_privkey
- name: Create the CSR for {{ cert.name }}
@ -53,6 +54,7 @@
ownca_path: "{{ _ca_file }}"
ownca_privatekey_path: "{{ pki_dir ~ '/roots/' ~ cert.signed_by ~ '/private/' ~ cert.signed_by ~ '.key.pem' }}"
provider: ownca
force: "{{ pki_regen_cert == cert.name or ((pki_regen_cert | lower) == 'true') }}"
register: cert_crt
when:
- cert.provider == 'ownca'
@ -75,4 +77,4 @@
- name: Create certificate chain for {{ cert.name }}
shell:
cmd: "cat {{ _cert_file }} {{ _ca_file }} > {{ _cert_chain_file }}"
creates: "{{ _cert_chain_file }}"
creates: "{{ (cert_crt is not changed) | ternary(_cert_chain_file, omit) }}"