9 lines
977 B
Django/Jinja
9 lines
977 B
Django/Jinja
[[ with secret "{{ nomad_vault_secrets.pki.path }}/issue/{{ nomad_vault_secrets.pki.role }}" "common_name={{ (nomad_conf.server.enabled) | ternary('server', 'client') }}-{{ ansible_fqdn | regex_replace('\\.', '-') }}.{{ nomad_conf.region | default('global') }}.nomad" "alt_names=localhost,{{ (nomad_conf.server.enabled) | ternary('server', 'client') }}.{{ nomad_conf.region | default('global') }}.nomad{% if nomad_conf.server.enabled and nomad_conf.client.enabled %},client.{{ nomad_conf.region | default('global') }}.nomad{% endif %}{% if consul_conf is defined %},nomad{{ nomad_conf.server.enabled | ternary('', '-client') }}.service.{{ consul_conf.domain | default('consul') }}{% endif %}"{% if nomad_vault_secrets.pki.ttl is defined %} "ttl={{ nomad_vault_secrets.pki.ttl }}"{% endif %} ]]
|
|
[[ .Data.{{ item.what }} ]]
|
|
[[ end ]]
|
|
{% if item.what == 'certificate' %}
|
|
[[ with secret "{{ nomad_vault_secrets.pki.path }}/cert/ca" ]]
|
|
[[ .Data.certificate ]]
|
|
[[ end ]]
|
|
{% endif %}
|