update docker-distribution role to handle certs more logically

Signed-off-by: Adam Miller <admiller@redhat.com>

playbooks/hosts/osbs-dev.fedorainfracloud.org.yml

@@ -142,12 +142,11 @@
     - {
       role: docker-distribution,
         cert: {
-          private_path: "files/osbs/osbs-dev.certs",
+          dest_dir: "/etc/pki/docker/osbs-dev.fedorainfracloud.org:5000/",
-          dir: "/etc/pki/docker/osbs-dev.fedorainfracloud.org:5000/",
+          cert_src: "{{private}}files/osbs/osbs-dev.certs/osbs-dev.fedorainfracloud.org.crt",
-          src_name: "osbs-dev.fedorainfracloud.org.crt",
+          cert_dest: "ca.key",
-          src_key_name: "osbs-dev.fedorainfracloud.org.key",
+          key_src: "{{private}}files/osbs/osbs-dev.certs/osbs-dev.fedorainfracloud.org.key",
-          dest_name: "ca.cert",
+          key_dest: "ca.cert",
-          dest_key_name: "ca.key"
         },
         tls: {
           enabled: True,

roles/docker-distribution/defaults/main.yml

@@ -19,14 +19,13 @@ storage:
   filesystem:
     rootdirectory: "/var/lib/registry/"
 http:
-  addr: ":5000"
+  addr: "localhost:5000"
 
 # Cert information to place certificate files on system
 cert:
-  private_path: "PRIVATE_PATH_TO_CERT_DIR"
+  dest_dir: "/etc/pki/docker/{{ ansible_fqdn }}{{ http.addr }}"
-  dir: "/etc/pki/docker/{{ ansible_fqdn }}{{ http.addr }}"
+  cert_src: "ca.crt"
-  src_name: "ca.crt"
+  cert_dest: "ca.crt"
-  src_key_name: "ca.key"
+  key_src: "ca.key"
-  dest_name: "ca.crt"
+  key_dest: "ca.key"
-  dest_key_name: "ca.key"
 

roles/docker-distribution/handlers/main.yml

@@ -1,2 +1,4 @@
 ---
 # handlers file for docker-distribution
+- name: restart docker-distribution
+  service: name=docker-distribution state=restarted

roles/docker-distribution/tasks/main.yml

@@ -11,6 +11,7 @@
   template:
     src: config.yml.j2
     dest: "{{ conf_path }}"
+  notify: restart docker-distribution
 
 - name: ensure docker certs dir exists
   file:
@@ -22,13 +23,13 @@
 
 - name: install tls cert for docker
   copy:
-    src: "{{ private  }}/{{ cert.private_path }}/{{ cert.src_name }}"
+    src: "{{ cert.cert_src }}"
-    dest: "{{ cert.dir }}/{{ cert.dest_name }}"
+    dest: "{{ cert.dir}}/{{ cert.cert_dest }}"
   when: tls.enabled
 
 - name: install tls key for docker
   copy:
-    src: "{{ private  }}/{{ cert.private_path }}/{{ cert.src_key_name }}"
+    src: "{{ cert.key_src }}"
-    dest: "{{ cert.dir}}/{{ cert.dest_key_name }}"
+    dest: "{{ cert.dir}}/{{ cert.key_dest }}"
   when: tls.enabled