---
- name: generate ca certificate chain
  command: >
    {{ openshift_client_binary }} adm ca create-signer-cert
    --config={{ mktemp.stdout }}/admin.kubeconfig
    --key='{{ mktemp.stdout }}/ca.key'
    --cert='{{ mktemp.stdout }}/ca.crt'
    --serial='{{ mktemp.stdout }}/ca.serial.txt'
    --name="metrics-signer@{{lookup('pipe','date +%s')}}"

- include_tasks: generate_hawkular_certificates.yaml