c12s-kubespray/roles/etcd/tasks/sync_etcd_node_certs.yml

---

- name: sync_etcd_node_certs | Create list of node certs needing creation
  set_fact:
    etcd_node_cert_list: "{{ etcd_node_cert_list|default([]) +  ['node-' + inventory_hostname + '.pem'] }}"

- include_tasks: ../../vault/tasks/shared/sync_file.yml
  vars:
    sync_file: "{{ item }}"
    sync_file_dir: "{{ etcd_cert_dir }}"
    sync_file_hosts: [ "{{ inventory_hostname }}" ]
    sync_file_is_cert: true
  with_items: "{{ etcd_node_cert_list|d([]) }}"

- name: sync_etcd_node_certs | Set facts for etcd sync_file results
  set_fact:
    etcd_node_certs_needed: "{{ etcd_node_certs_needed|default([]) + [item.path] }}"
  with_items: "{{ sync_file_results|d([]) }}"
  when: item.no_srcs|bool

- name: sync_etcd_node_certs | Unset sync_file_results after etcd node certs
  set_fact:
    sync_file_results: []

- include_tasks: ../../vault/tasks/shared/sync_file.yml
  vars:
    sync_file: ca.pem
    sync_file_dir: "{{ etcd_cert_dir }}"
    sync_file_hosts: "{{ groups['etcd'] }}"

- name: sync_etcd_node_certs | Unset sync_file_results after ca.pem
  set_fact:
    sync_file_results: []
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`---`

			`- name: sync_etcd_node_certs \| Create list of node certs needing creation`
Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements 2017-08-24 09:09:52 +00:00			`set_fact:`
Prune unnecessary certs from vault setup (#1652) * Cleaning up cert checks for vault * Removing all unnecessary etcd certs from each node * Removing all unnecessary kube certs from each node 2017-09-14 11:28:11 +00:00			`etcd_node_cert_list: "{{ etcd_node_cert_list\|default([]) + ['node-' + inventory_hostname + '.pem'] }}"`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00
Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`- include_tasks: ../../vault/tasks/shared/sync_file.yml`
Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements 2017-08-24 09:09:52 +00:00			`vars:`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`sync_file: "{{ item }}"`
			`sync_file_dir: "{{ etcd_cert_dir }}"`
Prune unnecessary certs from vault setup (#1652) * Cleaning up cert checks for vault * Removing all unnecessary etcd certs from each node * Removing all unnecessary kube certs from each node 2017-09-14 11:28:11 +00:00			`sync_file_hosts: [ "{{ inventory_hostname }}" ]`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`sync_file_is_cert: true`
			`with_items: "{{ etcd_node_cert_list\|d([]) }}"`

			`- name: sync_etcd_node_certs \| Set facts for etcd sync_file results`
			`set_fact:`
			`etcd_node_certs_needed: "{{ etcd_node_certs_needed\|default([]) + [item.path] }}"`
			`with_items: "{{ sync_file_results\|d([]) }}"`
			`when: item.no_srcs\|bool`

			`- name: sync_etcd_node_certs \| Unset sync_file_results after etcd node certs`
			`set_fact:`
			`sync_file_results: []`

Use include/import tasks (#2192) import_tasks will consume far less memory, so it should be used whenever it is compatible. 2018-01-29 11:37:48 +00:00			`- include_tasks: ../../vault/tasks/shared/sync_file.yml`
Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements 2017-08-24 09:09:52 +00:00			`vars:`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`sync_file: ca.pem`
			`sync_file_dir: "{{ etcd_cert_dir }}"`
Prune unnecessary certs from vault setup (#1652) * Cleaning up cert checks for vault * Removing all unnecessary etcd certs from each node * Removing all unnecessary kube certs from each node 2017-09-14 11:28:11 +00:00			`sync_file_hosts: "{{ groups['etcd'] }}"`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00
			`- name: sync_etcd_node_certs \| Unset sync_file_results after ca.pem`
			`set_fact:`
			`sync_file_results: []`