Allow using also IPs in OpenSSL cert san in Deployer

This commit is contained in:
Christer Warén
2025-09-10 14:11:43 +03:00
parent 6614a4e3fe
commit 4d248c463f

View File

@@ -499,7 +499,7 @@
when: when:
- config.openssl.certificates[cert].location.providence is not defined - config.openssl.certificates[cert].location.providence is not defined
- config.openssl.certificates[cert].location.city is not defined - config.openssl.certificates[cert].location.city is not defined
- config.openssl.certificates[cert].domains is undefined - config.openssl.certificates[cert].subjectAltName is undefined
tags: tags:
- openssl - openssl
- www - www
@@ -527,7 +527,7 @@
when: when:
- config.openssl.certificates[cert].location.providence is defined - config.openssl.certificates[cert].location.providence is defined
- config.openssl.certificates[cert].location.city is defined - config.openssl.certificates[cert].location.city is defined
- config.openssl.certificates[cert].domains is undefined - config.openssl.certificates[cert].subjectAltName is undefined
tags: tags:
- openssl - openssl
- www - www
@@ -542,13 +542,13 @@
stateOrProvinceName: "{{ config.openssl.certificates[cert].location.providence | default(None) }}" stateOrProvinceName: "{{ config.openssl.certificates[cert].location.providence | default(None) }}"
localityName: "{{ config.openssl.certificates[cert].location.city | default(None) }}" localityName: "{{ config.openssl.certificates[cert].location.city | default(None) }}"
countryName: FI countryName: FI
subjectAltName: "{{ ['DNS:'] | product(config.openssl.certificates[cert].domains) | map('join') | list }}" subjectAltName: "{{ config.openssl.certificates[cert].subjectAltName }}"
loop: "{{ config.openssl.certificates.keys() | list }}" loop: "{{ config.openssl.certificates.keys() | list }}"
loop_control: loop_control:
label: "{{ cert }}" label: "{{ cert }}"
loop_var: "cert" loop_var: "cert"
when: when:
- config.openssl.certificates[cert].domains is defined - config.openssl.certificates[cert].subjectAltName is defined
tags: tags:
- openssl - openssl
- www - www
@@ -584,7 +584,7 @@
label: "{{ cert }}" label: "{{ cert }}"
loop_var: "cert" loop_var: "cert"
when: when:
- config.openssl.certificates[cert].domains is undefined - config.openssl.certificates[cert].subjectAltName is undefined
- config.openssl.certificates[cert].issuer is defined - config.openssl.certificates[cert].issuer is defined
tags: tags:
- openssl - openssl
@@ -604,7 +604,7 @@
label: "{{ cert }}" label: "{{ cert }}"
loop_var: "cert" loop_var: "cert"
when: when:
- config.openssl.certificates[cert].domains is defined - config.openssl.certificates[cert].subjectAltName is defined
- config.openssl.certificates[cert].issuer is defined - config.openssl.certificates[cert].issuer is defined
tags: tags:
- openssl - openssl
@@ -619,7 +619,7 @@
label: "{{ cert }}" label: "{{ cert }}"
loop_var: "cert" loop_var: "cert"
when: when:
- config.openssl.certificates[cert].domains is defined - config.openssl.certificates[cert].subjectAltName is defined
- config.openssl.certificates[cert].issuer is defined - config.openssl.certificates[cert].issuer is defined
tags: tags:
- openssl - openssl
@@ -634,7 +634,7 @@
label: "{{ cert }}" label: "{{ cert }}"
loop_var: "cert" loop_var: "cert"
when: when:
- config.openssl.certificates[cert].domains is defined - config.openssl.certificates[cert].subjectAltName is defined
- config.openssl.certificates[cert].issuer is defined - config.openssl.certificates[cert].issuer is defined
tags: tags:
- openssl - openssl