Retrieve step-ca more reliably;Configure step-ca admin credentials
	
		
			
	
		
	
	
		
	
		
			All checks were successful
		
		
	
	
		
			
				
	
				continuous-integration/drone/push Build is passing
				
			
		
		
	
	
				
					
				
			
		
			All checks were successful
		
		
	
	continuous-integration/drone/push Build is passing
				
			This commit is contained in:
		| @@ -131,7 +131,7 @@ | ||||
|           entryPoints: | ||||
|             - websecure | ||||
|           routes: | ||||
|           - match: HostSNI(`ca.{{ vapp['metadata.fqdn'] }}`) | ||||
|           - match: HostSNI(`ca.{{ vapp['metacluster.fqdn'] }}`) | ||||
|             services: | ||||
|             - name: step-certificates | ||||
|               port: 443 | ||||
| @@ -144,20 +144,21 @@ | ||||
|   ansible.builtin.meta: flush_handlers | ||||
|  | ||||
| - name: Retrieve step-ca configuration | ||||
|   kubernetes.core.k8s_log: | ||||
|     kind: Job | ||||
|   kubernetes.core.k8s_info: | ||||
|     kind: ConfigMap | ||||
|     name: step-certificates | ||||
|     namespace: step-ca | ||||
|     kubeconfig: "{{ kubeconfig.path }}" | ||||
|   register: stepca_bootstraplog | ||||
|   register: stepca_configmap | ||||
|  | ||||
| - name: Install root CA in system truststore | ||||
|   ansible.builtin.shell: | ||||
|     cmd: | | ||||
|       step ca bootstrap \ | ||||
|         --ca-url={{ stepca_bootstraplog.log | regex_search('CA URL: (.+)', '\\1') | first }} \ | ||||
|         --fingerprint={{ stepca_bootstraplog.log | regex_search('CA Fingerprint: (.+)', '\\1') | first }} \ | ||||
|         --install | ||||
|         --ca-url=https://ca.{{ vapp['metacluster.fqdn'] }} \ | ||||
|         --fingerprint={{ stepca_configmap.resources[0].data['defaults.json'] | from_json | json_query('fingerprint') }} \ | ||||
|         --install \ | ||||
|         --force | ||||
|  | ||||
| - name: Install harbor chart | ||||
|   kubernetes.core.helm: | ||||
|   | ||||
		Reference in New Issue
	
	Block a user