86c5bc2b45
We currently only have letsencrypt_test_only as a single flag that sets tests to use the letsencrypt staging environment and also generates a self-signed certificate. However, for initial testing we actually want to fully generate certificates on hosts, but using the staging environment (i.e. *not* generate self-signed certs). Thus we need to split this option into two, so the gate tests still use staging+self-signed, but in-progress production hosts can just using the staging flag. These variables are split, and graphite01.opendev.org is made to create staging certificates. Also remove some debugging that is no longer necessary. Change-Id: I08959ba904f821c9408d8f363542502cd76a30a4
14 lines
499 B
YAML
14 lines
499 B
YAML
- name: 'Build arguments for letsencrypt acme.sh driver for: {{ item.key }}'
|
|
set_fact:
|
|
acme_args: '"{% for domain in item.value %}-d {{ domain }} {% endfor %}"'
|
|
|
|
- name: 'Run acme.sh driver for {{ item.key }} certificate issue'
|
|
shell:
|
|
cmd: |
|
|
/opt/acme.sh/driver.sh {{ 'selfsign' if letsencrypt_self_sign_only else 'renew' }} {{ acme_args }}
|
|
args:
|
|
chdir: /opt/acme.sh/
|
|
environment:
|
|
LETSENCRYPT_STAGING: '{{ "1" if letsencrypt_use_staging else "0" }}'
|
|
|
|
# Keys generated! |