okd/roles/etcd/tasks/validate_etcd_conf.yml

---
# This task file ensures expected variables exist in the case where systems have
# been upgraded from states where these values were not initially configured.

- name: Ensure ETCD_CA_FILE is absent
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: 'ETCD_CA_FILE'
    state: absent

- name: Ensure ETCD_PEER_CA_FILE is absent
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: 'ETCD_PEER_CA_FILE'
    state: absent

- name: Ensure ETCD_QUOTA_BACKEND_BYTES exists
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: '^ETCD_QUOTA_BACKEND_BYTES='
    line: 'ETCD_QUOTA_BACKEND_BYTES={{ etcd_quota_backend_bytes }}'

- name: Ensure ETCD_CLIENT_CERT_AUTH exists
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: '^ETCD_CLIENT_CERT_AUTH='
    line: 'ETCD_CLIENT_CERT_AUTH=true'

- name: Ensure ETCD_PEER_CLIENT_CERT_AUTH exists
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: '^ETCD_PEER_CLIENT_CERT_AUTH='
    line: 'ETCD_PEER_CLIENT_CERT_AUTH=true'

- name: Ensure ETCD_TRUSTED_CA_FILE exists
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: '^ETCD_TRUSTED_CA_FILE='
    line: 'ETCD_TRUSTED_CA_FILE={{ etcd_ca_file }}'

- name: Ensure ETCD_PEER_TRUSTED_CA_FILE exists
  lineinfile:
    destfile: "{{ etcd_conf_file }}"
    regexp: '^ETCD_PEER_TRUSTED_CA_FILE='
    line: 'ETCD_PEER_TRUSTED_CA_FILE={{ etcd_peer_ca_file }}'