Skip to content

Instantly share code, notes, and snippets.

@mcornea
Created December 11, 2018 20:42
Show Gist options
  • Select an option

  • Save mcornea/82c5d7abea101eaca035af969fd2db59 to your computer and use it in GitHub Desktop.

Select an option

Save mcornea/82c5d7abea101eaca035af969fd2db59 to your computer and use it in GitHub Desktop.
overcloud root ca
- name: register overcloud certificates environment file
shell: "cat /home/stack/virt/inject-trust-anchor.yaml"
register: oc_certs
- name: extract SSLRootCertificate
copy:
content: "{{ (oc_certs.stdout | from_yaml).parameter_defaults.SSLRootCertificate }}"
dest: /home/stack/rootca.pem
remote_src: yes
- name: inject root ca inside the image
shell: |
virt-copy-in -a /tmp/fedora-cloud-base-25-jenkins.qcow2 /home/stack/rootca.pem /etc/pki/ca-trust/source/anchors/
virt-customize -a /tmp/fedora-cloud-base-25-jenkins.qcow2 --selinux-relabel --run-command 'update-ca-trust'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment