ca_server_cert 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
  1. # flake8: noqa
  2. # pylint: skip-file
  3. DOCUMENTATION = '''
  4. ---
  5. module: oc_adm_ca_server_cert
  6. short_description: Module to run openshift oc adm ca create-server-cert
  7. description:
  8. - Wrapper around the openshift `oc adm ca create-server-cert` command.
  9. options:
  10. state:
  11. description:
  12. - Present is the only supported state. The state present means that `oc adm ca` will generate a certificate
  13. - and verify if the hostnames and the ClusterIP exists in the certificate.
  14. - When create-server-cert is desired then the following parameters are passed.
  15. - ['cert', 'key', 'signer_cert', 'signer_key', 'signer_serial']
  16. required: false
  17. default: present
  18. choices:
  19. - present
  20. aliases: []
  21. kubeconfig:
  22. description:
  23. - The path for the kubeconfig file to use for authentication
  24. required: false
  25. default: /etc/origin/master/admin.kubeconfig
  26. aliases: []
  27. debug:
  28. description:
  29. - Turn on debug output.
  30. required: false
  31. default: False
  32. aliases: []
  33. cert:
  34. description:
  35. - The certificate file. Choose a name that indicates what the service is.
  36. required: false
  37. default: None
  38. aliases: []
  39. key:
  40. description:
  41. - The key file. Choose a name that indicates what the service is.
  42. required: false
  43. default: None
  44. aliases: []
  45. force:
  46. description:
  47. - Force updating of the existing cert and key files
  48. required: false
  49. default: False
  50. aliases: []
  51. signer_cert:
  52. description:
  53. - The signer certificate file.
  54. required: false
  55. default: /etc/origin/master/ca.crt
  56. aliases: []
  57. signer_key:
  58. description:
  59. - The signer key file.
  60. required: false
  61. default: /etc/origin/master/ca.key
  62. aliases: []
  63. signer_serial:
  64. description:
  65. - The signer serial file.
  66. required: false
  67. default: /etc/origin/master/ca.serial.txt
  68. aliases: []
  69. hostnames:
  70. description:
  71. - Every hostname or IP that server certs should be valid for
  72. required: false
  73. default: []
  74. aliases: []
  75. backup:
  76. description:
  77. - Whether to backup the cert and key files before writing them.
  78. required: false
  79. default: True
  80. aliases: []
  81. expire_days:
  82. description
  83. - Validity of the certificate in days
  84. required: false
  85. default: None
  86. aliases: []
  87. author:
  88. - "Kenny Woodson <kwoodson@redhat.com>"
  89. extends_documentation_fragment: []
  90. '''
  91. EXAMPLES = '''
  92. - name: Create a self-signed cert
  93. oc_adm_ca_server_cert:
  94. signer_cert: /etc/origin/master/ca.crt
  95. signer_key: /etc/origin/master/ca.key
  96. signer_serial: /etc/origin/master/ca.serial.txt
  97. hostnames: "registry.test.openshift.com,127.0.0.1,docker-registry.default.svc.cluster.local"
  98. cert: /etc/origin/master/registry.crt
  99. key: /etc/origin/master/registry.key
  100. '''