haproxy: IPA certs don't depend on data center

The IPA cert doesn't change when we move datacenters, because we
just replicate across. So it shouldn't have the datacenter in the
name. This should fix haproxy deployment (it was broken because
we didn't have an 'rdu3' file).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit is contained in:
Adam Williamson 2025-07-03 11:54:43 -07:00
parent 1f05949fbc
commit 9da2cfb6f2
3 changed files with 2 additions and 1 deletions

View file

@ -36,7 +36,8 @@
dest={{ item.dest }}
owner=root group=root mode=0600
with_items:
- { file: "ipa.{{env}}-rdu3.pem", dest: /etc/haproxy/ipa.pem }
# this one does not necessarily change when we move DCs, due to replication
- { file: "ipa.{{env}}.pem", dest: /etc/haproxy/ipa.pem }
- { file: "ocp.{{env_short}}-rdu3.pem", dest: "/etc/haproxy/ocp-{{env_short}}.pem" }
- { file: "ocp.{{env_short}}-rdu3.pem", dest: "/etc/haproxy/ocp-{{env_short}}-rdu3.pem" }
tags: