C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

template fix to avoid extra characters in vault policy

Browse source
This commit is contained in:
Anton Nerozya 2017-07-13 15:57:58 +02:00
parent 09d664dc09
commit e37f334373
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
roles/vault/tasks/shared/create_role.yml
View file

@ -9,16 +9,16 @@
body_format: json
body:
rules: >-
{%- if create_role_policy_rules|d("default") == "default" -%}
{%- if create_role_policy_rules|d("default") == "default" %}
{{
{ 'path': {
'pki/issue/' + create_role_name: {'policy': 'write'},
'pki/roles/' + create_role_name: {'policy': 'read'}
}} | to_json + '\n'
}} | to_json
}}
{%- else -%}
{{ create_role_policy_rules | to_json + '\n' }}
{%- endif -%}
{{ create_role_policy_rules | to_json }}
{%- endif %}
status_code: 204
when: inventory_hostname == groups[create_role_group]|first
ignore_errors: "{{ ansible_check_mode }}"