system-config/playbooks/roles/letsencrypt-config-certcheck
Clark Boylan 475edcbe98 Add debugging info to certcheck list building
We've seen the certcheck list building loop fail because some host
doesn't ahve the appropriate var in its hostvars. Unfortunately ansible
logging doesn't record the value of the list iteration item when an
iteration fails. It only records this value when it succeeds....
Work around this with our own debugging output.

Additionally use a unique loop_var value in case we're hitting some sort
of 'item' name collision problem. It is just good practice to avoid
'item' anyway.

Change-Id: Ia3ed089187e0b8397413fbb989c44906d56811ae
2023-10-16 23:38:38 +00:00
..
defaults Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
tasks Add debugging info to certcheck list building 2023-10-16 23:38:38 +00:00
templates Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
README.rst Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00

README.rst

Generate SSL check list

This role automatically generates a list of domains for the certificate validation checks. This ensures our certificates are valid and are being renewed as expected.

This role must run after letsencrypt-request-certs role, as that builds the letsencrypt_certcheck_domains variable for each host and certificate. It must also run on a host that has already run the install-certcheck role.

Role Variables