Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Freeze Break Request: Update openshift ssl certs

Browse source 
These certs are used for *.app.os.fedoraproject.org.
ie, things that don't also have/use a fedoraproject.org route.
THis includes the console and some apps that just never bothered to make
a fedoraproject route.

Fixes 9162

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-10-14 10:23:14 -07:00 • committed by kevin
parent 1326be797a
commit 150f53ecb0
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

8
inventory/group_vars/all
View file

@ -254,10 +254,10 @@ wildcard_key_file: wildcard-2020.fedoraproject.org.key
wildcard_int_file: wildcard-2020.fedoraproject.org.intermediate.cert wildcard_int_file: wildcard-2020.fedoraproject.org.intermediate.cert
# This is the openshift wildcard cert. Until it exists set it equal to wildcard # This is the openshift wildcard cert. Until it exists set it equal to wildcard
os_wildcard_cert_name: wildcard-2017.app.os.fedoraproject.org os_wildcard_cert_name: wildcard-2020.app.os.fedoraproject.org
os_wildcard_crt_file: wildcard-2017.app.os.fedoraproject.org.cert os_wildcard_crt_file: wildcard-2020.app.os.fedoraproject.org.cert
os_wildcard_key_file: wildcard-2017.app.os.fedoraproject.org.key os_wildcard_key_file: wildcard-2020.app.os.fedoraproject.org.key
os_wildcard_int_file: wildcard-2017.app.os.fedoraproject.org.intermediate.cert os_wildcard_int_file: wildcard-2020.app.os.fedoraproject.org.intermediate.cert
# Everywhere, always, we should sign messages and validate signatures. # Everywhere, always, we should sign messages and validate signatures.
# However, we allow individual hosts and groups to override this. Use this very # However, we allow individual hosts and groups to override this. Use this very

4
playbooks/include/proxies-certificates.yml
View file

@ -36,8 +36,8 @@
- app.os.fedoraproject.org - app.os.fedoraproject.org
- role: httpd/certificate - role: httpd/certificate
certname: wildcard-2017.app.os.fedoraproject.org certname: wildcard-2020.app.os.fedoraproject.org
SSLCertificateChainFile: wildcard-2017.app.os.fedoraproject.org.intermediate.cert SSLCertificateChainFile: wildcard-2020.app.os.fedoraproject.org.intermediate.cert
tags: tags:
- app.os.fedoraproject.org - app.os.fedoraproject.org