X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=ocd%2Finfra%2Fplaybooks%2Froles%2Fmepserver%2Ftasks%2Finstall.yml;h=fdf7940eadadcd39094c3c6bddeb7ae214b01fee;hb=42ca3fcbed3996d68e1e7d3035e5e859eef7edb5;hp=b739ae2798ebe9e2e7fc9013936ec75b71b1497e;hpb=1dfa3f73a4a08086b7edb5e33d035e1e900ebf31;p=ealt-edge.git diff --git a/ocd/infra/playbooks/roles/mepserver/tasks/install.yml b/ocd/infra/playbooks/roles/mepserver/tasks/install.yml index b739ae2..fdf7940 100644 --- a/ocd/infra/playbooks/roles/mepserver/tasks/install.yml +++ b/ocd/infra/playbooks/roles/mepserver/tasks/install.yml @@ -23,47 +23,6 @@ src: deploy dest: /tmp/mepserver/ -- name: Generate Certificates - shell: -# yamllint disable rule:line-length - cmd: openssl genrsa -out ca.key 2048 - chdir: /tmp/mepserver/deploy/ - -- name: Generate Certificate - Step 2 - shell: - cmd: openssl req -new -key ca.key -subj /C=CN/ST=Peking/L=Beijing/O=ealtedge/CN=www.ealtedge.org -out ca.csr - chdir: /tmp/mepserver/deploy/ - -- name: Generate Root Certificate - shell: - cmd: openssl x509 -req -days 365 -in ca.csr -extensions v3_req -signkey ca.key -out trust.cer - chdir: /tmp/mepserver/deploy/ - -- name: Generate TLS certificate and TLS Key - shell: - cmd: openssl genrsa -out server_key.pem 2048 - chdir: /tmp/mepserver/deploy/ - -- name: Generate TLS Certificate and TLS Key - shell: - cmd: openssl req -new -key server_key.pem -subj /C=CN/ST=Beijing/L=Beijing/O=ealtedge/CN=www.ealtedge.org -out tls.csr - chdir: /tmp/mepserver/deploy/ - -- name: Generate TLS Certificate and TLS Key - shell: - cmd: openssl x509 -req -in tls.csr -extensions v3_req -CA trust.cer -CAkey ca.key -CAcreateserial -out server.cer - chdir: /tmp/mepserver/deploy/ - -- name: Create mepssl-secret - shell: -# yamllint disable rule:line-length - cmd: kubectl create secret --namespace mep generic mepssl-secret --from-file=/tmp/mepserver/deploy/server.cer --from-file=/tmp/mepserver/deploy/server_key.pem --from-file=/tmp/mepserver/deploy/trust.cer - -- name: Create kongssl-secret - shell: -# yamllint disable rule:line-length - cmd: kubectl create secret --namespace mep generic kongssl-secret --from-file=/tmp/mepserver/deploy/server.cer --from-file=/tmp/mepserver/deploy/server_key.pem --from-file=/tmp/mepserver/deploy/trust.cer - - name: Apply mep-basic.yaml shell: cmd: kubectl apply -f /tmp/mepserver/deploy/mep-basic.yaml @@ -79,12 +38,3 @@ - name: Apply postgres-k8s.yaml shell: cmd: kubectl apply -f /tmp/mepserver/deploy/postgres-k8s.yaml - -- name: -----Configuring Kong API Gateway----- - shell: - cmd: sleep 30 - -- name: Configuring Kong API Gateway - shell: - cmd: chmod +x kongconfig.sh && ./kongconfig.sh - chdir: /tmp/mepserver/deploy/