Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

staging: move to new wildcard stg cert

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-03-01 14:21:08 -08:00
parent e3bee776ea
commit c7537a7bb9
2 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
inventory/group_vars/staging
View file

@ -51,8 +51,8 @@ os_wildcard_int_file: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.ce
os_wildcard_key_file: wildcard-2021.app.os.stg.fedoraproject.org.key
# RIP, FAS
primary_auth_source: ipa
wildcard_cert_file: wildcard-2020.stg.fedoraproject.org.cert
wildcard_cert_file: wildcard-2022.stg.fedoraproject.org.cert
# This is the wildcard certname for our stg proxies.
wildcard_cert_name: wildcard-2020.stg.fedoraproject.org
wildcard_int_file: wildcard-2020.stg.fedoraproject.org.intermediate.cert
wildcard_key_file: wildcard-2020.stg.fedoraproject.org.key
wildcard_cert_name: wildcard-2022.stg.fedoraproject.org
wildcard_int_file: wildcard-2022.stg.fedoraproject.org.intermediate.cert
wildcard_key_file: wildcard-2022.stg.fedoraproject.org.key

5
playbooks/include/proxies-certificates.yml
View file

@ -32,6 +32,11 @@
SSLCertificateChainFile: wildcard-2020.stg.fedoraproject.org.intermediate.cert
when: env == "staging"
- role: httpd/certificate
certname: wildcard-2022.stg.fedoraproject.org
SSLCertificateChainFile: wildcard-2022.stg.fedoraproject.org.intermediate.cert
when: env == "staging"
- role: httpd/certificate
certname: wildcard-2021.app.os.stg.fedoraproject.org
SSLCertificateChainFile: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert