C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

template fix to avoid extra characters in vault policy

Browse source
This commit is contained in:
Anton Nerozya 2017-07-13 15:57:58 +02:00
parent 09d664dc09
commit e37f334373
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
roles/vault/tasks/shared/create_role.yml
View file

@ -9,16 +9,16 @@
body_format: json body_format: json
body: body:
rules: >- rules: >-
{%- if create_role_policy_rules|d("default") == "default" -%} {%- if create_role_policy_rules|d("default") == "default" %}
{{ {{
{ 'path': { { 'path': {
'pki/issue/' + create_role_name: {'policy': 'write'}, 'pki/issue/' + create_role_name: {'policy': 'write'},
'pki/roles/' + create_role_name: {'policy': 'read'} 'pki/roles/' + create_role_name: {'policy': 'read'}
}} | to_json + '\n' }} | to_json
}} }}
{%- else -%} {%- else -%}
{{ create_role_policy_rules | to_json + '\n' }} {{ create_role_policy_rules | to_json }}
{%- endif -%} {%- endif %}
status_code: 204 status_code: 204
when: inventory_hostname == groups[create_role_group]|first when: inventory_hostname == groups[create_role_group]|first
ignore_errors: "{{ ansible_check_mode }}" ignore_errors: "{{ ansible_check_mode }}"