Allow rproxy generate certificates for proxy host

This commit is contained in:
2025-08-15 00:09:06 +03:00
parent f4717d9d69
commit d7919a4a45

View File

@@ -37,6 +37,12 @@
become_user: "{{ ansible_user }}" become_user: "{{ ansible_user }}"
ignore_errors: true ignore_errors: true
- name: "Allow {{ ansible_facts['hostname'] }}.{{ ansible_facts['domain'] }} to get certificates for HTTP/{{ rproxy_service_name }}.{{ ansible_facts['domain'] }} SPN "
ansible.builtin.shell:
cmd: "ipa service-add-host --hosts={{ ansible_facts['hostname'] }}.{{ ansible_facts['domain'] }} HTTP/{{ rproxy_service_name }}.{{ ansible_facts['domain'] }}"
become: false
become_user: "{{ ansible_user }}"
- name: Request certificate via ipa-getcert - name: Request certificate via ipa-getcert
ansible.builtin.command: > ansible.builtin.command: >
ipa-getcert request ipa-getcert request