Rénich Bon Ćirić
7f6d539ac5
- Add install-ca and remove-ca targets to GNUmakefile. - Allows local installation/removal of certs/koji_ca_cert.crt into the system CA trust anchors. Co-developed-by: Gemini AI <renich+gemini@woralelandia.com> Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
45 lines
936 B
Makefile
45 lines
936 B
Makefile
.PHONY: clean-certs
|
|
clean-certs:
|
|
find certs/ -type f ! -name '.gitignore' -delete
|
|
|
|
.PHONY: tofu-init
|
|
tofu-init:
|
|
make -C opentofu/ init
|
|
|
|
.PHONY: tofu-apply
|
|
tofu-apply: clean-certs
|
|
make -C opentofu/ apply
|
|
|
|
.PHONY: tofu-destroy
|
|
tofu-destroy:
|
|
make -C opentofu/ destroy
|
|
|
|
.PHONY: init
|
|
init: tofu-destroy tofu-apply
|
|
|
|
.PHONY: regenerate-certs
|
|
regenerate-certs: clean-certs
|
|
ansible-playbook -i inventories/staging/ deploy.yaml --tags common --vault-password-file .pass
|
|
|
|
.PHONY: deploy
|
|
deploy:
|
|
ansible-playbook --vault-pass-file=.pass deploy.yaml
|
|
|
|
.PHONY: bootstrap
|
|
bootstrap:
|
|
ansible-playbook --vault-pass-file=.pass bootstrap.yaml
|
|
|
|
.PHONY: reset
|
|
reset:
|
|
ansible-playbook --vault-pass-file=.pass reset.yaml
|
|
|
|
.PHONY: install-ca
|
|
install-ca:
|
|
cp certs/koji_ca_cert.crt /etc/pki/ca-trust/source/anchors/koji_ca_cert.crt
|
|
update-ca-trust
|
|
|
|
.PHONY: remove-ca
|
|
remove-ca:
|
|
rm -f /etc/pki/ca-trust/source/anchors/koji_ca_cert.crt
|
|
update-ca-trust
|
|
|