Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Revert "basessh: try and filter out the empty list element"

Browse source 
This reverts commit 91db9425bc.
This commit is contained in:
Kevin Fenzi 2022-11-19 10:18:04 -08:00
parent 91db9425bc
commit 7e40030b01
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/basessh/tasks/main.yml
View file

@ -176,7 +176,7 @@
fetch: src="{{item}}.pub" fetch: src="{{item}}.pub"
dest="{{pubkeydir}}" dest="{{pubkeydir}}"
fail_on_missing=false fail_on_missing=false
with_items: "{{certs_to_sign|select()|list}}" with_items: "{{certs_to_sign}}"
tags: tags:
- basessh - basessh
- sshd_cert - sshd_cert
@ -201,7 +201,7 @@
- name: Sign the certificates - name: Sign the certificates
shell: "ssh-keygen -s {{private}}/files/ssh/{{env}}_ca_host_key -t rsa-sha2-256 -I {{inventory_hostname}} -h -n {{ sign_hostnames|join(',') }} -V {{sign_validity}} -z `date +%s` {{pubkeydir}}/{{inventory_hostname}}{{item}}.pub" shell: "ssh-keygen -s {{private}}/files/ssh/{{env}}_ca_host_key -t rsa-sha2-256 -I {{inventory_hostname}} -h -n {{ sign_hostnames|join(',') }} -V {{sign_validity}} -z `date +%s` {{pubkeydir}}/{{inventory_hostname}}{{item}}.pub"
delegate_to: localhost delegate_to: localhost
with_items: "{{certs_to_sign|select()|list}}" with_items: "{{certs_to_sign}}"
check_mode: no check_mode: no
tags: tags:
- basessh - basessh
@ -214,7 +214,7 @@
- name: Copy the certificates - name: Copy the certificates
copy: src="{{pubkeydir}}/{{inventory_hostname}}{{item}}-cert.pub" copy: src="{{pubkeydir}}/{{inventory_hostname}}{{item}}-cert.pub"
dest="{{item}}-cert.pub" dest="{{item}}-cert.pub"
with_items: "{{certs_to_sign|select()|list}}" with_items: "{{certs_to_sign}}"
register: certcopy register: certcopy
notify: notify:
- restart sshd - restart sshd