Michael Gugino 5120f8e90c Implement container runtime role		7 年前
..
defaults	5120f8e90c Implement container runtime role	7 年前
handlers	5120f8e90c Implement container runtime role	7 年前
meta	d8d0e6d7de Separate certificate playbooks.	7 年前
tasks	346ce4fc59 Removed old version code	7 年前
vars	4ec879a68e Re-arrange master and node role dependencies.	8 年前
README.md	b463c613a8 openshift_node_certificates: add openshift_node_cert_expire_days parameter.	8 年前

OpenShift Node Certificates

This role determines if OpenShift node certificates must be created, delegates certificate creation to the openshift_ca_host and then deploys those certificates to node hosts which this role is being applied to.

Requirements

Ansible 2.2

Role Variables

From openshift_ca:

Name	Default value	Description
openshift_ca_host	None (Required)	The hostname of the system where the OpenShift CA will be (or has been) created.

From this role:

Name	Default value	Description
openshift_generated_configs_dir	`{{ openshift.common.config_base }}/generated-configs`	Directory in which per-node generated config directories will be created on the `openshift_ca_host`.
openshift_node_cert_subdir	`node-{{ openshift.common.hostname }}`	Directory within `openshift_generated_configs_dir` where per-node certificates will be placed on the `openshift_ca_host`.
openshift_node_cert_expire_days	`730` (2 years)	Validity of the certificates in days. Works only with OpenShift version 1.5 (3.5) and later.
openshift_node_config_dir	`{{ openshift.common.config_base }}/node`	Node configuration directory in which certificates will be deployed on nodes.
openshift_node_generated_config_dir	`{{ openshift_generated_configs_dir }}/{{ openshift_node_cert_subdir }`	Full path to the per-node generated config directory.

Dependencies

openshift_ca

Example Playbook

- name: Create OpenShift Node Certificates
  hosts: nodes
  roles:
  - role: openshift_node_certificates
    openshift_ca_host: master1.example.com

License

Apache License Version 2.0

Author Information

Jason DeTiberus (jdetiber@redhat.com)

README.md