diff options
author | Andrew Butcher <abutcher@redhat.com> | 2016-10-26 14:59:05 -0400 |
---|---|---|
committer | Andrew Butcher <abutcher@redhat.com> | 2017-02-02 15:29:11 -0500 |
commit | 917e871843192b107776ce8459b87f3960e455ed (patch) | |
tree | 08acb27fa87578137bb21917487c2521cd08aa82 /filter_plugins | |
parent | c9480811d2222693abe4460ca42c292b289a0ef4 (diff) | |
download | openshift-917e871843192b107776ce8459b87f3960e455ed.tar.gz openshift-917e871843192b107776ce8459b87f3960e455ed.tar.bz2 openshift-917e871843192b107776ce8459b87f3960e455ed.tar.xz openshift-917e871843192b107776ce8459b87f3960e455ed.zip |
Restructure certificate redeploy playbooks
Diffstat (limited to 'filter_plugins')
-rw-r--r-- | filter_plugins/openshift_master.py | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/filter_plugins/openshift_master.py b/filter_plugins/openshift_master.py index f209d6c3b..77b0a3dc9 100644 --- a/filter_plugins/openshift_master.py +++ b/filter_plugins/openshift_master.py @@ -517,13 +517,11 @@ class FilterModule(object): return valid @staticmethod - def certificates_to_synchronize(hostvars, include_keys=True): + def certificates_to_synchronize(hostvars, include_keys=True, include_ca=True): ''' Return certificates to synchronize based on facts. ''' if not issubclass(type(hostvars), dict): raise errors.AnsibleFilterError("|failed expects hostvars is a dict") - certs = ['ca.crt', - 'ca.key', - 'admin.crt', + certs = ['admin.crt', 'admin.key', 'admin.kubeconfig', 'master.kubelet-client.crt', @@ -534,6 +532,8 @@ class FilterModule(object): 'openshift-router.crt', 'openshift-router.key', 'openshift-router.kubeconfig'] + if bool(include_ca): + certs += ['ca.crt', 'ca.key'] if bool(include_keys): certs += ['serviceaccounts.private.key', 'serviceaccounts.public.key'] |