Changeset - 6c256b0514cf
[Not reviewed]
0 2 0
Branko Majic (branko) - 7 years ago 2016-11-21 22:18:26
branko@majic.rs
MAR-71: Update the CA certificate cache in the common role immediatelly instead as a handler. Solves issues where certificate validation is performed during the inital run of different roles (handler would run at the end of playbook). Removed unused handler for updating the CA certificate cache.
2 files changed with 5 insertions and 5 deletions:
0 comments (0 inline, 0 general)
roles/common/handlers/main.yml
Show inline comments
 
@@ -6,9 +6,6 @@
 
- name: Restart SSH
 
  service: name=ssh state=restarted
 

	
 
- name: Update CA certificate cache
 
  command: /usr/sbin/update-ca-certificates --fresh
 

	
 
- name: Restart ferm
 
  service: name=ferm state=restarted
 

	
roles/common/tasks/main.yml
Show inline comments
 
@@ -81,8 +81,11 @@
 
- name: Deploy CA certificates
 
  copy: content="{{ item.value }}" dest="/usr/local/share/ca-certificates/{{ item.key }}.crt" mode=644 owner=root group=root
 
  with_dict: "{{ ca_certificates }}"
 
  notify:
 
    - Update CA certificate cache
 
  register: deploy_ca_certificates_result
 

	
 
- name: Update CA certificate cache
 
  command: /usr/sbin/update-ca-certificates --fresh
 
  when: deploy_ca_certificates_result.changed
 

	
 
- name: Install ferm (for firewall management)
 
  apt: name=ferm state=installed
0 comments (0 inline, 0 general)