mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-26 15:13:20 +02:00
10 lines
685 B
Plaintext
10 lines
685 B
Plaintext
|
{% if consul_conf.server %}
|
||
|
|
[[ with secret "{{ consul_vault_tls.pki.path }}/issue/{{ consul_vault_tls.pki.role }}" "common_name={{ consul_conf.server | ternary('server', 'client') }}-{{ ansible_fqdn | regex_replace('\\.', '-') }}.{{ consul_conf.datacenter | default('dc1') }}.{{ consul_conf.domain | default('consul') }}" "ttl={{ consul_vault_tls.pki.ttl }}" "alt_names=localhost,{{ consul_conf.server | ternary('server', 'client') }}.{{ consul_conf.datacenter | default('dc1') }}.{{ consul_conf.domain | default('consul') }}" ]]
|
||
|
|
[[ .Data.{{ item.what }} ]]
|
||
|
|
[[ end ]]
|
||
|
|
{% else %}
|
||
|
|
[[ with secret "{{ consul_vault_tls.pki.path }}/cert/ca" ]]
|
||
|
|
[[ .Data.certificate ]]
|
||
|
|
[[ end ]]
|
||
|
|
{% endif %}
|