mirror of
https://github.com/cwchristerw/tjas-infra
synced 2025-09-20 12:52:55 +00:00
Allow using also IPs in OpenSSL cert san in Deployer
This commit is contained in:
@@ -499,7 +499,7 @@
|
|||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].location.providence is not defined
|
- config.openssl.certificates[cert].location.providence is not defined
|
||||||
- config.openssl.certificates[cert].location.city is not defined
|
- config.openssl.certificates[cert].location.city is not defined
|
||||||
- config.openssl.certificates[cert].domains is undefined
|
- config.openssl.certificates[cert].subjectAltName is undefined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
- www
|
- www
|
||||||
@@ -527,7 +527,7 @@
|
|||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].location.providence is defined
|
- config.openssl.certificates[cert].location.providence is defined
|
||||||
- config.openssl.certificates[cert].location.city is defined
|
- config.openssl.certificates[cert].location.city is defined
|
||||||
- config.openssl.certificates[cert].domains is undefined
|
- config.openssl.certificates[cert].subjectAltName is undefined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
- www
|
- www
|
||||||
@@ -542,13 +542,13 @@
|
|||||||
stateOrProvinceName: "{{ config.openssl.certificates[cert].location.providence | default(None) }}"
|
stateOrProvinceName: "{{ config.openssl.certificates[cert].location.providence | default(None) }}"
|
||||||
localityName: "{{ config.openssl.certificates[cert].location.city | default(None) }}"
|
localityName: "{{ config.openssl.certificates[cert].location.city | default(None) }}"
|
||||||
countryName: FI
|
countryName: FI
|
||||||
subjectAltName: "{{ ['DNS:'] | product(config.openssl.certificates[cert].domains) | map('join') | list }}"
|
subjectAltName: "{{ config.openssl.certificates[cert].subjectAltName }}"
|
||||||
loop: "{{ config.openssl.certificates.keys() | list }}"
|
loop: "{{ config.openssl.certificates.keys() | list }}"
|
||||||
loop_control:
|
loop_control:
|
||||||
label: "{{ cert }}"
|
label: "{{ cert }}"
|
||||||
loop_var: "cert"
|
loop_var: "cert"
|
||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].domains is defined
|
- config.openssl.certificates[cert].subjectAltName is defined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
- www
|
- www
|
||||||
@@ -584,7 +584,7 @@
|
|||||||
label: "{{ cert }}"
|
label: "{{ cert }}"
|
||||||
loop_var: "cert"
|
loop_var: "cert"
|
||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].domains is undefined
|
- config.openssl.certificates[cert].subjectAltName is undefined
|
||||||
- config.openssl.certificates[cert].issuer is defined
|
- config.openssl.certificates[cert].issuer is defined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
@@ -604,7 +604,7 @@
|
|||||||
label: "{{ cert }}"
|
label: "{{ cert }}"
|
||||||
loop_var: "cert"
|
loop_var: "cert"
|
||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].domains is defined
|
- config.openssl.certificates[cert].subjectAltName is defined
|
||||||
- config.openssl.certificates[cert].issuer is defined
|
- config.openssl.certificates[cert].issuer is defined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
@@ -619,7 +619,7 @@
|
|||||||
label: "{{ cert }}"
|
label: "{{ cert }}"
|
||||||
loop_var: "cert"
|
loop_var: "cert"
|
||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].domains is defined
|
- config.openssl.certificates[cert].subjectAltName is defined
|
||||||
- config.openssl.certificates[cert].issuer is defined
|
- config.openssl.certificates[cert].issuer is defined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
@@ -634,7 +634,7 @@
|
|||||||
label: "{{ cert }}"
|
label: "{{ cert }}"
|
||||||
loop_var: "cert"
|
loop_var: "cert"
|
||||||
when:
|
when:
|
||||||
- config.openssl.certificates[cert].domains is defined
|
- config.openssl.certificates[cert].subjectAltName is defined
|
||||||
- config.openssl.certificates[cert].issuer is defined
|
- config.openssl.certificates[cert].issuer is defined
|
||||||
tags:
|
tags:
|
||||||
- openssl
|
- openssl
|
||||||
|
Reference in New Issue
Block a user