Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests6 Projects Releases Packages Wiki Activity Actions

basessh: try and move the variable expansion out to the addition

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-11-19 10:28:06 -08:00
parent 7e40030b01
commit 25914510c1
1 changed files with 2 additions and 2 deletions

4
roles/basessh/tasks/main.yml
View file

@ -120,7 +120,7 @@
- name: Set list of certs to sign - name: Set list of certs to sign
set_fact: set_fact:
certs_to_sign: "{{certs_to_sign}} + [ '{{item.item.path}}' ]" certs_to_sign: "{{ certs_to_sign + ['{{item.item.path}}'] }}"
with_items: "{{ssh_cert_files.results}}" with_items: "{{ssh_cert_files.results}}"
when: not item.stat.exists and item.item.path.startswith('/etc/ssh') when: not item.stat.exists and item.item.path.startswith('/etc/ssh')
tags: tags:
@ -134,7 +134,7 @@
# Renew if last mod was more than 10 months ago # Renew if last mod was more than 10 months ago
- name: Get soon-to-expire certificates to sign - name: Get soon-to-expire certificates to sign
set_fact: set_fact:
certs_to_sign: "{{certs_to_sign}} + [ '{{item.item.path}}' ]" certs_to_sign: "{{ certs_to_sign + ['{{item.item.path}}'] }}"
with_items: "{{ssh_cert_files.results}}" with_items: "{{ssh_cert_files.results}}"
when: "item.stat.exists and item.item.path.startswith('/etc/ssh') and item.stat.mtime|int < (lookup('pipe', 'date +%s')|int - 25920000)" when: "item.stat.exists and item.item.path.startswith('/etc/ssh') and item.stat.mtime|int < (lookup('pipe', 'date +%s')|int - 25920000)"
tags: tags: