CORD-761 generate core API cert and copy to head node
Change-Id: I80533f099cf370f555058416b80d599d02a2c953
diff --git a/roles/xos-install/tasks/main.yml b/roles/xos-install/tasks/main.yml
index 72c4aa0..846d1a5 100644
--- a/roles/xos-install/tasks/main.yml
+++ b/roles/xos-install/tasks/main.yml
@@ -136,6 +136,17 @@
- id_rsa.pub
- node_key
+- name: Copy over core api key
+ copy:
+ src: "{{ playbook_dir }}/pki/intermediate_ca/private/xos-core.{{ site_suffix }}_key.pem"
+ dest: "{{ service_profile_repo_dest }}/{{ xos_configuration }}/core_api_key.pem"
+ mode: 0600
+
+- name: Copy over core api cert
+ copy:
+ src: "{{ playbook_dir }}/pki/intermediate_ca/certs/xos-core.{{ site_suffix }}_cert_chain.pem"
+ dest: "{{ service_profile_repo_dest }}/{{ xos_configuration }}/core_api_cert.pem"
+
- name: Create templated TOSCA files
template:
src: "{{ item }}.j2"
diff --git a/vars/cord.yml b/vars/cord.yml
index c1d8798..50ed1bc 100644
--- a/vars/cord.yml
+++ b/vars/cord.yml
@@ -30,6 +30,10 @@
altnames:
- "DNS:keystone.{{ site_suffix }}"
- "DNS:{{ site_suffix }}"
+ - cn: "xos-core.{{ site_suffix }}"
+ subj: "/C=US/ST=California/L=Menlo Park/O=ON.Lab/OU=Test Deployment/CN=xos-core.{{ site_suffix }}"
+ altnames:
+ - "DNS:xos-core.{{ site_suffix }}"
# resolv.conf settings
dns_search: