Retrieve step-ca more reliably;Configure step-ca admin credentials
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
2022-08-24 17:44:30 +02:00
parent a3da5b8f93
commit 9a3898e0b8
2 changed files with 12 additions and 14 deletions

View File

@ -131,7 +131,7 @@
entryPoints:
- websecure
routes:
- match: HostSNI(`ca.{{ vapp['metadata.fqdn'] }}`)
- match: HostSNI(`ca.{{ vapp['metacluster.fqdn'] }}`)
services:
- name: step-certificates
port: 443
@ -144,20 +144,21 @@
ansible.builtin.meta: flush_handlers
- name: Retrieve step-ca configuration
kubernetes.core.k8s_log:
kind: Job
kubernetes.core.k8s_info:
kind: ConfigMap
name: step-certificates
namespace: step-ca
kubeconfig: "{{ kubeconfig.path }}"
register: stepca_bootstraplog
register: stepca_configmap
- name: Install root CA in system truststore
ansible.builtin.shell:
cmd: |
step ca bootstrap \
--ca-url={{ stepca_bootstraplog.log | regex_search('CA URL: (.+)', '\\1') | first }} \
--fingerprint={{ stepca_bootstraplog.log | regex_search('CA Fingerprint: (.+)', '\\1') | first }} \
--install
--ca-url=https://ca.{{ vapp['metacluster.fqdn'] }} \
--fingerprint={{ stepca_configmap.resources[0].data['defaults.json'] | from_json | json_query('fingerprint') }} \
--install \
--force
- name: Install harbor chart
kubernetes.core.helm: