*** Wartungsfenster jeden ersten Mittwoch vormittag im Monat ***

Skip to content
Snippets Groups Projects
Commit e379c473 authored by entlein's avatar entlein
Browse files

feature: adding pub key generation and upload to KV as task after kubeconfig

parent b47fd82b
Branches
No related tags found
1 merge request!1Restore main as the default branch
...@@ -19,6 +19,9 @@ ...@@ -19,6 +19,9 @@
- include_tasks: kubeconfig.yml - include_tasks: kubeconfig.yml
when: state != 'absent' and 'master' in group_names when: state != 'absent' and 'master' in group_names
- include_tasks: privkey.yml
when: state != 'absent' and 'master' in group_names
- name: uninstall rke2 - name: uninstall rke2
command: rke2-uninstall.sh command: rke2-uninstall.sh
when: rke2_installed.stat.exists and state == 'absent' when: rke2_installed.stat.exists and state == 'absent'
- name: wait for private key to exist
wait_for:
path: /var/lib/rancher/rke2/server/tls/service.key
- name: generate public key from private key for jwks
shell: |
openssl rsa -in /var/lib/rancher/rke2/server/tls/service.key -pubout -out /var/lib/rancher/rke2/server/tls/service.pub
- name: fetch public key from master
ansible.builtin.fetch:
src: /var/lib/rancher/rke2/server/tls/service.pub
dest: service.pub
flat: yes
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment