diff options
author | Christian Pointner <equinox@spreadspace.org> | 2022-12-07 19:16:39 +0100 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2022-12-07 19:33:32 +0100 |
commit | f294c367c70d04d3de1c10fa87c2be4ea6cc3012 (patch) | |
tree | e9accdbd8bb877f02543a3425fc394517cac4007 /roles/monitoring/prometheus/exporter/base/tasks | |
parent | alerta: allow to force alerm severity for heartbeats (diff) |
prometheus/node-exporter: make certificate SANs configurable
promethues/server: add support for federation
Diffstat (limited to 'roles/monitoring/prometheus/exporter/base/tasks')
-rw-r--r-- | roles/monitoring/prometheus/exporter/base/tasks/tls.yml | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/roles/monitoring/prometheus/exporter/base/tasks/tls.yml b/roles/monitoring/prometheus/exporter/base/tasks/tls.yml index 35f410e8..a2d2f4a9 100644 --- a/roles/monitoring/prometheus/exporter/base/tasks/tls.yml +++ b/roles/monitoring/prometheus/exporter/base/tasks/tls.yml @@ -32,9 +32,7 @@ path: /etc/ssl/prometheus/exporter/csr.pem privatekey_path: /etc/ssl/prometheus/exporter/key.pem CN: "{{ inventory_hostname }}" - subject_alt_name: - - "DNS:{{ host_name }}.{{ host_domain }}" - - "IP:{{ (inventory_hostname == prometheus_server) | ternary('127.0.0.1', (prometheus_exporter_listen_addr | default(ansible_default_ipv4.address))) }}" + subject_alt_name: "{{ prometheus_exporter_certificate_san }}" key_usage: - digitalSignature key_usage_critical: yes |