Skip to content

Commit fed66c0

Browse files
authored
Add enterprise root CA to cEdge's bootstrap (#39)
1 parent 9378924 commit fed66c0

File tree

2 files changed

+10
-1
lines changed

2 files changed

+10
-1
lines changed

roles/aws_edges/tasks/aws_cedge_ec2_instance.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,8 @@
7979
src: ./bootstrap_cedge.j2
8080
dest: "{{ userdata_cedge_templated }}"
8181
mode: "0644"
82-
82+
vars:
83+
enterprise_root_ca: "{{ lookup('file', enterprise_ca_cert_path | default(results_dir~'/certificates/ca.crt')) }}"
8384

8485
- name: Set interfaces fact
8586
ansible.builtin.set_fact:

roles/aws_edges/templates/bootstrap_cedge.j2

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,14 @@ vinitparam:
1313
- otp : {{ otp }}
1414
- org : {{ organization_name }}
1515
- vbond: {{ vbond }}
16+
{% if controller_certificate_auth is defined and controller_certificate_auth == "enterprise" %}
17+
- rcc : true
18+
ca-certs:
19+
remove-defaults: false
20+
trusted:
21+
- |
22+
{{ enterprise_root_ca | indent(3) }}
23+
{% endif %}
1624

1725

1826
--===============0630588950316195806==

0 commit comments

Comments
 (0)