Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

basessh: set the delegate here to localhost

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2019-07-01 18:18:03 +00:00
parent 3ed359e343
commit 812c4c0f0d
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/basessh/tasks/main.yml
View file

@ -161,7 +161,7 @@
group=root group=root
mode=0600 mode=0600
state=directory state=directory
delegate_to: "batcave01.phx2.fedoraproject.org" delegate_to: localhost
run_once: true run_once: true
changed_when: False changed_when: False
tags: tags:
@ -200,7 +200,7 @@
# Currently, we use the epoch as serial. That's unique enough for now # Currently, we use the epoch as serial. That's unique enough for now
- name: Sign the certificates - name: Sign the certificates
shell: "ssh-keygen -s {{private}}/files/ssh/{{env}}_ca_host_key -I {{inventory_hostname}} -h -n {{ sign_hostnames|join(',') }} -V {{sign_validity}} -z `date +%s` {{pubkeydir}}/{{inventory_hostname}}{{item}}.pub" shell: "ssh-keygen -s {{private}}/files/ssh/{{env}}_ca_host_key -I {{inventory_hostname}} -h -n {{ sign_hostnames|join(',') }} -V {{sign_validity}} -z `date +%s` {{pubkeydir}}/{{inventory_hostname}}{{item}}.pub"
delegate_to: "batcave01.phx2.fedoraproject.org" delegate_to: localhost
with_items: "{{certs_to_sign}}" with_items: "{{certs_to_sign}}"
tags: tags:
- basessh - basessh