summaryrefslogtreecommitdiffstats
path: root/playbooks/common/openshift-cluster/redeploy-certificates
diff options
context:
space:
mode:
authorAndrew Butcher <abutcher@redhat.com>2017-09-21 15:18:08 -0400
committerAndrew Butcher <abutcher@redhat.com>2017-09-21 15:37:12 -0400
commit775128cc52d8295fe4cf08211ab53730d101692c (patch)
treeec67eba9059a99fb59573cbe60c6c70fee3c7ca4 /playbooks/common/openshift-cluster/redeploy-certificates
parent4ba216918e27d2e075b237e3151630d55d1a563d (diff)
downloadopenshift-775128cc52d8295fe4cf08211ab53730d101692c.tar.gz
openshift-775128cc52d8295fe4cf08211ab53730d101692c.tar.bz2
openshift-775128cc52d8295fe4cf08211ab53730d101692c.tar.xz
openshift-775128cc52d8295fe4cf08211ab53730d101692c.zip
Do a full stop/start when etcd certificates had expired.
Diffstat (limited to 'playbooks/common/openshift-cluster/redeploy-certificates')
-rw-r--r--playbooks/common/openshift-cluster/redeploy-certificates/check-expiry.yml12
1 files changed, 12 insertions, 0 deletions
diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/check-expiry.yml b/playbooks/common/openshift-cluster/redeploy-certificates/check-expiry.yml
new file mode 100644
index 000000000..4a9fbf7eb
--- /dev/null
+++ b/playbooks/common/openshift-cluster/redeploy-certificates/check-expiry.yml
@@ -0,0 +1,12 @@
+---
+- name: Check cert expirys
+ hosts: "{{ g_check_expiry_hosts }}"
+ vars:
+ openshift_certificate_expiry_show_all: yes
+ roles:
+ # Sets 'check_results' per host which contains health status for
+ # etcd, master and node certificates. We will use 'check_results'
+ # to determine if any certificates were expired prior to running
+ # this playbook. Service restarts will be skipped if any
+ # certificates were previously expired.
+ - role: openshift_certificate_expiry