Add sshd_cert tag

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-08-15 15:19:53 +00:00
parent 30a50542ad
commit 800f9145d3

View file

@ -4,6 +4,7 @@
patterns="ssh_host_*_key"
register: ssh_key_files
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -14,6 +15,7 @@
with_items: "{{ssh_key_files.files}}"
register: ssh_cert_files
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -23,6 +25,7 @@
set_fact:
certs_to_sign: "[]"
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -34,6 +37,7 @@
with_items: "{{ssh_cert_files.results}}"
when: not item.stat.exists
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -44,6 +48,7 @@
- set_fact:
pubkeydir: "/tmp/sshkeysign"
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -58,6 +63,7 @@
delegate_to: "batcave01.phx2.fedoraproject.org"
run_once: true
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -69,6 +75,7 @@
fail_on_missing=true
with_items: "{{certs_to_sign}}"
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -79,6 +86,7 @@
sign_hostnames: "{{ssh_hostnames}} + ['{{inventory_hostname}}']"
sign_validity: "-1h:+52w"
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -90,6 +98,7 @@
delegate_to: "batcave01.phx2.fedoraproject.org"
with_items: "{{certs_to_sign}}"
tags:
- sshd_cert
- sshd_config
- config
- sshd
@ -102,6 +111,7 @@
notify:
- restart sshd
tags:
- sshd_cert
- sshd_config
- config
- sshd