commit 1cac00113e45722f0abb2f8107c1f9e67aa7d4d2
author Andy Bavier <andy@onlab.us> Mon Mar 13 10:06:18 2017 -0400
committer Andy Bavier <andy@onlab.us> Tue Mar 14 16:04:45 2017 -0400
tree e01d3a50ff9fa9cd28f038e27b35b9b51a86025f
parent 032facdc5e0fcf13098190c8088b66af26df16ea

CORD-1007 Generate certs and keys on the corddev VM

Change-Id: I18e9662f3efc7bf249ed319b1f7f7086f9424270

roles/pki-root-ca/defaults/main.yml

diff --git a/roles/pki-root-ca/defaults/main.yml b/roles/pki-root-ca/defaults/main.yml
index 326eb36..8f6888c 100644
--- a/roles/pki-root-ca/defaults/main.yml
+++ b/roles/pki-root-ca/defaults/main.yml
@@ -1,8 +1,8 @@
 ---
 # pki-root-ca/defaults/main.yml
 
-pki_dir: "{{ playbook_dir }}/pki"
-credentials_dir: "{{ playbook_dir }}/credentials"
+pki_dir: "/opt/pki"
+credentials_dir: "/opt/credentials"
 
 # ca parameters
 ca_digest: "sha256"
@@ -10,7 +10,7 @@
 ca_root_days: 3650
 
 # passphrases for the key
-ca_root_phrase: "{{ lookup('password', 'credentials/ca_root_phrase length=64') }}"
+ca_root_phrase: "{{ lookup('password', credentials_dir+'/ca_root_phrase length=64') }}"
 
 # noninteractive csr subject
 ca_root_subj: "/C=US/ST=California/L=Menlo Park/O=ON.Lab/OU=Test Deployment/CN=CORD Test Deployment Root CA"