diff options
| -rw-r--r-- | playbooks/common/openshift-cluster/redeploy-certificates/registry.yml | 15 | ||||
| -rw-r--r-- | roles/openshift_hosted/tasks/registry/secure.yml | 11 | 
2 files changed, 14 insertions, 12 deletions
diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml b/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml index 999e4af65..6771cc98d 100644 --- a/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml +++ b/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml @@ -48,12 +48,15 @@    # Replace dc/docker-registry certificate secret contents if set.    - block: +    - name: Load lib_openshift modules +      include_role: +        name: lib_openshift +      - name: Retrieve registry service IP -      command: > -        {{ openshift.common.client_binary }} get service docker-registry -        -o jsonpath='{.spec.clusterIP}' -        --config={{ mktemp.stdout }}/admin.kubeconfig -        -n default +      oc_service: +        namespace: default +        name: docker-registry +        state: list        register: docker_registry_service_ip        changed_when: false @@ -67,7 +70,7 @@          --signer-cert={{ openshift.common.config_base }}/master/ca.crt          --signer-key={{ openshift.common.config_base }}/master/ca.key          --signer-serial={{ openshift.common.config_base }}/master/ca.serial.txt -        --hostnames="{{ docker_registry_service_ip.stdout }},docker-registry.default.svc.cluster.local,{{ docker_registry_route_hostname }}" +        --hostnames="{{ docker_registry_service_ip.results.clusterip }},docker-registry.default.svc.cluster.local,{{ docker_registry_route_hostname }}"          --cert={{ openshift.common.config_base }}/master/registry.crt          --key={{ openshift.common.config_base }}/master/registry.key diff --git a/roles/openshift_hosted/tasks/registry/secure.yml b/roles/openshift_hosted/tasks/registry/secure.yml index 216a40874..556da5304 100644 --- a/roles/openshift_hosted/tasks/registry/secure.yml +++ b/roles/openshift_hosted/tasks/registry/secure.yml @@ -20,11 +20,10 @@    failed_when: false  - name: Retrieve registry service IP -  command: > -    {{ openshift.common.client_binary }} get service docker-registry -    -o jsonpath='{.spec.clusterIP}' -    --config={{ openshift_hosted_kubeconfig }} -    -n default +  oc_service: +    namespace: default +    name: docker-registry +    state: list    register: docker_registry_service_ip    changed_when: false @@ -37,7 +36,7 @@      --signer-cert={{ openshift_master_config_dir }}/ca.crt      --signer-key={{ openshift_master_config_dir }}/ca.key      --signer-serial={{ openshift_master_config_dir }}/ca.serial.txt -    --hostnames="{{ docker_registry_service_ip.stdout }},docker-registry.default.svc.cluster.local,{{ docker_registry_route_hostname }}" +    --hostnames="{{ docker_registry_service_ip.results.clusterip }},docker-registry.default.svc.cluster.local,{{ docker_registry_route_hostname }}"      --cert={{ openshift_master_config_dir }}/registry.crt      --key={{ openshift_master_config_dir }}/registry.key    when: False in (docker_registry_certificates_stat_result.results | default([]) | oo_collect(attribute='stat.exists') | list)  | 
