Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

update certs for ocp3 stg and prod and ocp4 stg

Browse source 
Signed-off-by: Mark O Brien <markobri@redhat.com>
This commit is contained in:
Mark O Brien 2022-04-27 15:49:21 +01:00 • committed by mobrien
parent 2adc9dd660
commit 0729bce300
3 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
inventory/group_vars/all
View file

@ -190,10 +190,10 @@ ocp_wildcard_key_file: wildcard-2022.apps.ocp.fedoraproject.org.key
# Fedora Infra # Fedora Infra
openshift_ansible: /srv/web/infra/openshift-ansible/ openshift_ansible: /srv/web/infra/openshift-ansible/
# This is the openshift wildcard cert. Until it exists set it equal to wildcard # This is the openshift wildcard cert. Until it exists set it equal to wildcard
os_wildcard_cert_name: wildcard-2021.app.os.fedoraproject.org os_wildcard_cert_name: wildcard-2022.app.os.fedoraproject.org
os_wildcard_crt_file: wildcard-2021.app.os.fedoraproject.org.cert os_wildcard_crt_file: wildcard-2022.app.os.fedoraproject.org.cert
os_wildcard_int_file: wildcard-2021.app.os.fedoraproject.org.intermediate.cert os_wildcard_int_file: wildcard-2022.app.os.fedoraproject.org.intermediate.cert
os_wildcard_key_file: wildcard-2021.app.os.fedoraproject.org.key os_wildcard_key_file: wildcard-2022.app.os.fedoraproject.org.key
postfix_group: "none" postfix_group: "none"
# This is a list of services that need to wait for VPN to be up before getting started. # This is a list of services that need to wait for VPN to be up before getting started.
postvpnservices: [] postvpnservices: []

8
inventory/group_vars/staging
View file

@ -44,11 +44,11 @@ ocp_wildcard_cert_file: wildcard-2022.apps.ocp.stg.fedoraproject.org.cert
ocp_wildcard_cert_name: wildcard-2022.apps.ocp.stg.fedoraproject.org ocp_wildcard_cert_name: wildcard-2022.apps.ocp.stg.fedoraproject.org
ocp_wildcard_int_file: wildcard-2022.apps.ocp.stg.fedoraproject.org.intermediate.cert ocp_wildcard_int_file: wildcard-2022.apps.ocp.stg.fedoraproject.org.intermediate.cert
ocp_wildcard_key_file: wildcard-2022.apps.ocp.stg.fedoraproject.org.key ocp_wildcard_key_file: wildcard-2022.apps.ocp.stg.fedoraproject.org.key
os_wildcard_cert_file: wildcard-2021.app.os.stg.fedoraproject.org.cert os_wildcard_cert_file: wildcard-2022.app.os.stg.fedoraproject.org.cert
# This is the openshift wildcard cert for stg # This is the openshift wildcard cert for stg
os_wildcard_cert_name: wildcard-2021.app.os.stg.fedoraproject.org os_wildcard_cert_name: wildcard-2022.app.os.stg.fedoraproject.org
os_wildcard_int_file: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert os_wildcard_int_file: wildcard-2022.app.os.stg.fedoraproject.org.intermediate.cert
os_wildcard_key_file: wildcard-2021.app.os.stg.fedoraproject.org.key os_wildcard_key_file: wildcard-2022.app.os.stg.fedoraproject.org.key
# RIP, FAS # RIP, FAS
primary_auth_source: ipa primary_auth_source: ipa
wildcard_cert_file: wildcard-2022.stg.fedoraproject.org.cert wildcard_cert_file: wildcard-2022.stg.fedoraproject.org.cert

8
playbooks/include/proxies-certificates.yml
View file

@ -38,8 +38,8 @@
when: env == "staging" when: env == "staging"
- role: httpd/certificate - role: httpd/certificate
certname: wildcard-2021.app.os.stg.fedoraproject.org certname: wildcard-2022.app.os.stg.fedoraproject.org
SSLCertificateChainFile: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert SSLCertificateChainFile: wildcard-2022.app.os.stg.fedoraproject.org.intermediate.cert
when: env == "staging" when: env == "staging"
tags: tags:
- app.os.stg.fedoraproject.org - app.os.stg.fedoraproject.org
@ -52,8 +52,8 @@
- apps.ocp.stg.fedoraproject.org - apps.ocp.stg.fedoraproject.org
- role: httpd/certificate - role: httpd/certificate
certname: wildcard-2021.app.os.fedoraproject.org certname: wildcard-2022.app.os.fedoraproject.org
SSLCertificateChainFile: wildcard-2021.app.os.fedoraproject.org.intermediate.cert SSLCertificateChainFile: wildcard-2022.app.os.fedoraproject.org.intermediate.cert
tags: tags:
- app.os.fedoraproject.org - app.os.fedoraproject.org