Zack Williams | c047c87 | 2017-01-11 08:38:15 -0700 | [diff] [blame] | 1 | --- |
| 2 | # pki-install/tasks/main.yml |
| 3 | |
| 4 | - name: Copy CA certificates to head node |
| 5 | become: yes |
| 6 | copy: |
| 7 | src: "{{ playbook_dir }}/pki/{{ item.src }}" |
| 8 | dest: "/usr/local/share/ca-certificates/{{ item.dest }}" |
| 9 | with_items: |
| 10 | - src: "root_ca/certs/ca_cert.pem" |
| 11 | dest: "cord_root_ca.crt" |
| 12 | - src: "intermediate_ca/certs/im_cert.pem" |
| 13 | dest: "cord_intermediate_ca.crt" |
| 14 | notify: |
| 15 | - Run update-ca-certificates on head node |
| 16 | - Copy root CA cert to all service VMs |
| 17 | - Copy intermediate CA cert to all service VMs |
| 18 | - update-ca-certificates in service VMs |