summaryrefslogtreecommitdiffstats
path: root/roles/openshift_logging/tasks/generate_certs.yaml
diff options
context:
space:
mode:
authorRich Megginson <rmeggins@redhat.com>2017-04-19 15:16:03 -0600
committerRich Megginson <rmeggins@redhat.com>2017-04-19 15:16:03 -0600
commit5bb31fda251fc930cd83842fcf06afb7cc77c1c7 (patch)
treecceeec7992be8061789c3ad301c31b58899d6936 /roles/openshift_logging/tasks/generate_certs.yaml
parent9ace041daaf1bca509f21499b812f4f3e96fdd80 (diff)
downloadopenshift-5bb31fda251fc930cd83842fcf06afb7cc77c1c7.tar.gz
openshift-5bb31fda251fc930cd83842fcf06afb7cc77c1c7.tar.bz2
openshift-5bb31fda251fc930cd83842fcf06afb7cc77c1c7.tar.xz
openshift-5bb31fda251fc930cd83842fcf06afb7cc77c1c7.zip
mux does not require privileged, only hostmount-anyuid
Diffstat (limited to 'roles/openshift_logging/tasks/generate_certs.yaml')
-rw-r--r--roles/openshift_logging/tasks/generate_certs.yaml23
1 files changed, 23 insertions, 0 deletions
diff --git a/roles/openshift_logging/tasks/generate_certs.yaml b/roles/openshift_logging/tasks/generate_certs.yaml
index 740e490e1..b34df018d 100644
--- a/roles/openshift_logging/tasks/generate_certs.yaml
+++ b/roles/openshift_logging/tasks/generate_certs.yaml
@@ -45,6 +45,21 @@
- procure_component: kibana-internal
hostnames: "kibana, kibana-ops, {{openshift_logging_kibana_hostname}}, {{openshift_logging_kibana_ops_hostname}}"
+- include: procure_server_certs.yaml
+ loop_control:
+ loop_var: cert_info
+ with_items:
+ - procure_component: mux
+ hostnames: "logging-mux, {{openshift_logging_mux_hostname}}"
+ when: openshift_logging_use_mux
+
+- include: procure_shared_key.yaml
+ loop_control:
+ loop_var: shared_key_info
+ with_items:
+ - procure_component: mux
+ when: openshift_logging_use_mux
+
- name: Copy proxy TLS configuration file
copy: src=server-tls.json dest={{generated_certs_dir}}/server-tls.json
when: server_tls_json is undefined
@@ -85,6 +100,14 @@
loop_control:
loop_var: node_name
+- name: Generate PEM cert for mux
+ include: generate_pems.yaml component={{node_name}}
+ with_items:
+ - system.logging.mux
+ loop_control:
+ loop_var: node_name
+ when: openshift_logging_use_mux
+
- name: Creating necessary JKS certs
include: generate_jks.yaml