Explorar o código

Use openshift_ca_host's hostnames to sign the CA

If for some reason oo_first_master and openshift_ca_host are different
we could've signed the CA with the wrong hostnames.
Scott Dodson %!s(int64=8) %!d(string=hai) anos
pai
achega
28bcb25d55
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      roles/openshift_ca/tasks/main.yml

+ 1 - 1
roles/openshift_ca/tasks/main.yml

@@ -95,7 +95,7 @@
     {% for legacy_ca_certificate in g_master_legacy_ca_result.files | default([]) | oo_collect('path') %}
     --certificate-authority {{ legacy_ca_certificate }}
     {% endfor %}
-    --hostnames={{ openshift.common.all_hostnames | join(',') }}
+    --hostnames={{ hostvars[openshift_ca_host].openshift.common.all_hostnames | join(',') }}
     --master={{ openshift.master.api_url }}
     --public-master={{ openshift.master.public_api_url }}
     --cert-dir={{ openshift_ca_config_dir }}