mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 11:44:31 +00:00
598eae4633
- Add ssl_hosts group and prole_ssl role to deploy registry cert/key to /etc/ssl/certs/prole - Configure k8s registry deployment to serve HTTPS using mounted host certs - Switch k3s/containerd registry mirror config to https:// and prefer HTTPS checks with HTTP fallback Co-authored-by: Junie <junie@jetbrains.com>
18 lines
464 B
YAML
18 lines
464 B
YAML
---
|
|
- name: Ensure Prole SSL directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ prole_ssl_dest_dir }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Deploy Prole SSL files
|
|
ansible.builtin.copy:
|
|
src: "{{ prole_ssl_src_dir }}/{{ item }}"
|
|
dest: "{{ prole_ssl_dest_dir }}/{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: "{{ '0600' if (item | regex_search('\\.key$')) else '0644' }}"
|
|
loop: "{{ prole_ssl_files }}"
|