prole/infrastructure/roles/prole_ssl/defaults/main.yml
chrisfu 598eae4633 Enable TLS for k3s registry and deploy SSL certs
- Add ssl_hosts group and prole_ssl role to deploy registry cert/key to /etc/ssl/certs/prole

- Configure k8s registry deployment to serve HTTPS using mounted host certs

- Switch k3s/containerd registry mirror config to https:// and prefer HTTPS checks with HTTP fallback

Co-authored-by: Junie <junie@jetbrains.com>
2026-03-10 00:58:08 -07:00

11 lines
277 B
YAML

---
prole_ssl_dest_dir: /etc/ssl/certs/prole
# Source directory on the Ansible controller (this repo)
prole_ssl_src_dir: "{{ playbook_dir }}/../../ssl/prole"
# Files to deploy (relative to prole_ssl_src_dir)
prole_ssl_files:
- myrddin-registry.crt
- myrddin-registry.key