Fix filename/keyname;Disable jinja trim_blocks

2022-08-29 22:43:26 +02:00
parent 2097dec958
commit 042b9eb36f
3 changed files with 14 additions and 12 deletions
--- a/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/certauthority.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/certauthority.yml
@ -34,13 +34,15 @@
      kind: Secret
      metadata:
        name: step-certificates-certs
-        namespace: "{{ item }}"
+        namespace: "{{ item.namespace }}"
      data:
-        root_ca.crt: "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
+        "{{ item.key }}": "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
    kubeconfig: "{{ kubeconfig.path }}"
  loop:
-    - argo-cd
-    - kube-system
+    - namespace: argo-cd
+      key: custom-ca-certificates.crt
+    - namespace: kube-system
+      key: root_ca.crt

 - name: Configure step-ca passthrough ingress
  ansible.builtin.template: