---

# INSTALLING HOST CERTIFICATES

# Chown only later, at this stage we don't have a myproxy user
- name: copy hostcert
  copy:
    src: "{{ inventory_hostname }}.crt"
    dest: /etc/grid-security/hostcert.pem
    mode: 0644

# Chown only later, at this stage we don't have a myproxy user
- name: copy hostkey
  copy:
    src: "{{ inventory_hostname }}.key"
    dest: /etc/grid-security/hostkey.pem
    mode: 0400

# INSTALLING TRUST ANCHOR OF HOST CERTIFICATE FROM RPM

# install trust root from rpm package(s)
- name: deploy trust anchor(s) from rpm
  yum:
    name: "{{ item }}"
    state: present
  with_items: "{{ trust_anchor_packages }}"
  when: trust_anchor_packages is defined

# INSTALLING TRUST ANCHOR OF HOST CERTIFICATE FROM TARBALL

# install trust root from tarball file
- name: unpack trust anchor(s) from tarball
  unarchive:
    src: "{{ item }}"
    copy: yes
    dest: "{{ x509_cert_dir }}"
    mode: 0644
    owner: root
    group: root
  with_items: "{{ trust_anchor_tarballs }}"
  when: trust_anchor_tarballs is defined

---

# INSTALLING HOST CERTIFICATES

# Chown only later, at this stage we don't have a myproxy user
- name: copy hostcert
  copy:
    src: "{{ inventory_hostname }}.crt"
    dest: /etc/grid-security/hostcert.pem
    mode: 0644

# Chown only later, at this stage we don't have a myproxy user
- name: copy hostkey
  copy:
    src: "{{ inventory_hostname }}.key"
    dest: /etc/grid-security/hostkey.pem
    mode: 0400

# INSTALLING TRUST ANCHOR OF HOST CERTIFICATE FROM RPM

# install trust root from rpm package(s)
- name: deploy trust anchor(s) from rpm
  yum:
    name: "{{ item }}"
    state: present
  with_items: "{{ trust_anchor_packages }}"
  when: trust_anchor_packages is defined

# INSTALLING TRUST ANCHOR OF HOST CERTIFICATE FROM TARBALL

# install trust root from tarball file
- name: unpack trust anchor(s) from tarball
  unarchive:
    src: "{{ item }}"
    dest: "{{ x509_cert_dir }}"
    mode: 0644
    owner: root
    group: root
  with_items: "{{ trust_anchor_tarballs }}"
  when: trust_anchor_tarballs is defined

Remove deprecated and default copy option
Remove deprecated and default copy option
