infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Deploy renewed openshift certs

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2021-03-27 12:05:35 -07:00
parent 85ac490787
commit 7dadf93f44
3 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
inventory/group_vars/all
View file

@ -255,10 +255,10 @@ wildcard_key_file: wildcard-2020.fedoraproject.org.key
wildcard_int_file: wildcard-2020.fedoraproject.org.intermediate.cert
# This is the openshift wildcard cert. Until it exists set it equal to wildcard
os_wildcard_cert_name: wildcard-2020.app.os.fedoraproject.org
os_wildcard_crt_file: wildcard-2020.app.os.fedoraproject.org.cert
os_wildcard_key_file: wildcard-2020.app.os.fedoraproject.org.key
os_wildcard_int_file: wildcard-2020.app.os.fedoraproject.org.intermediate.cert
os_wildcard_cert_name: wildcard-2021.app.os.fedoraproject.org
os_wildcard_crt_file: wildcard-2021.app.os.fedoraproject.org.cert
os_wildcard_key_file: wildcard-2021.app.os.fedoraproject.org.key
os_wildcard_int_file: wildcard-2021.app.os.fedoraproject.org.intermediate.cert
# Everywhere, always, we should sign messages and validate signatures.
# However, we allow individual hosts and groups to override this. Use this very

8
inventory/group_vars/staging
View file

@ -13,10 +13,10 @@ wildcard_key_file: wildcard-2020.stg.fedoraproject.org.key
wildcard_int_file: wildcard-2020.stg.fedoraproject.org.intermediate.cert
# This is the openshift wildcard cert for stg
os_wildcard_cert_name: wildcard-2020.app.os.stg.fedoraproject.org
os_wildcard_cert_file: wildcard-2020.app.os.stg.fedoraproject.org.cert
os_wildcard_key_file: wildcard-2020.app.os.stg.fedoraproject.org.key
os_wildcard_int_file: wildcard-2020.stg.fedoraproject.org.intermediate.cert
os_wildcard_cert_name: wildcard-2021.app.os.stg.fedoraproject.org
os_wildcard_cert_file: wildcard-2021.app.os.stg.fedoraproject.org.cert
os_wildcard_key_file: wildcard-2021.app.os.stg.fedoraproject.org.key
os_wildcard_int_file: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert
fedmsg_prefix: org.fedoraproject
fedmsg_env: stg

8
playbooks/include/proxies-certificates.yml
View file

@ -29,15 +29,15 @@
when: env == "staging"
- role: httpd/certificate
certname: wildcard-2020.app.os.stg.fedoraproject.org
SSLCertificateChainFile: wildcard-2020.app.os.stg.fedoraproject.org.intermediate.cert
certname: wildcard-2021.app.os.stg.fedoraproject.org
SSLCertificateChainFile: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert
when: env == "staging"
tags:
- app.os.fedoraproject.org
- role: httpd/certificate
certname: wildcard-2020.app.os.fedoraproject.org
SSLCertificateChainFile: wildcard-2020.app.os.fedoraproject.org.intermediate.cert
certname: wildcard-2021.app.os.fedoraproject.org
SSLCertificateChainFile: wildcard-2021.app.os.fedoraproject.org.intermediate.cert
tags:
- app.os.fedoraproject.org