|
|
@ -13,7 +13,7 @@ |
|
|
|
/usr/local/share/ca-certificates/kube-cluster-ca.crt |
|
|
|
{%- elif ansible_os_family == "RedHat" -%} |
|
|
|
/etc/pki/ca-trust/source/anchors/kube-cluster-ca.crt |
|
|
|
{%- elif ansible_os_family == "CoreOS" -%} |
|
|
|
{%- elif ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] -%} |
|
|
|
/etc/ssl/certs/kube-cluster-ca.pem |
|
|
|
{%- endif %} |
|
|
|
|
|
|
@ -25,7 +25,7 @@ |
|
|
|
|
|
|
|
- name: bootstrap/ca_trust | update ca-certificates (Debian/Ubuntu/CoreOS) |
|
|
|
command: update-ca-certificates |
|
|
|
when: vault_ca_cert.changed and ansible_os_family in ["Debian", "CoreOS"] |
|
|
|
when: vault_ca_cert.changed and ansible_os_family in ["Debian", "CoreOS", "Container Linux by CoreOS"] |
|
|
|
|
|
|
|
- name: bootstrap/ca_trust | update ca-certificates (RedHat) |
|
|
|
command: update-ca-trust extract |
|
|
|