From 21b3c9a2b3580a99e56d17d3a0bff6425d3e574f Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Sat, 11 May 2019 17:42:21 +0200 Subject: [PATCH] Add secret-tls Signed-off-by: Patrick Uiterwijk --- roles/openshift/secret-tls/tasks/main.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 roles/openshift/secret-tls/tasks/main.yml diff --git a/roles/openshift/secret-tls/tasks/main.yml b/roles/openshift/secret-tls/tasks/main.yml new file mode 100644 index 0000000000..e184bfcaf0 --- /dev/null +++ b/roles/openshift/secret-tls/tasks/main.yml @@ -0,0 +1,19 @@ +- name: Copy private tlscert {{privatefile}} + copy: src={{private}}/files/{{ private_cert }} dest=/etc/openshift_apps/{{app}}/{{key}}.crt + register: secret_privatecert + +- name: Copy private tlskey {{privatefile}} + copy: src={{private}}/files/{{ private_key }} dest=/etc/openshift_apps/{{app}}/{{key}}.key + register: secret_privatekey + +- name: Delete existing secrets + shell: oc -n {{app}} delete secret/{{secret_name}} + register: delete_out + changed_when: "'NotFound' in delete_out.stderr" + failed_when: "('NotFound' not in delete_out.stderr) and (delete_out.rc != 0)" + when: secret_privatecert.changed or secret_privatekey.changed + +- name: Call `oc secrets new` on the copied file + shell: oc -n {{app}} create secret tls {{secret_name}} --cert=/etc/openshift_apps/{{app}}/{{key}}.crt --key=/etc/openshift_apps/{{app}}/{{key}}.key + register: create_out + when: secret_privatecert.changed or secret_privatekey.changed