Determine automatically if we're running on the CA host

README.md

@@ -14,7 +14,6 @@ Some files are copied to the host you're running Ansible on.
 
 ## Variables ##
 
-* `ca_ca`: Is this host the CA host? (default: `false`)
 * `ca_manage_openssl`: Install `openssl` package? (default: `true`)
 * `ca_ca_dir`: Directory to place CA and certificates (default: `/opt/ca`)
 * `ca_ca_days`: Runtime of the CA certificate (default: `3650`)

defaults/main.yml

@@ -1,6 +1,5 @@
 ---
 
-ca_ca: false
 ca_manage_openssl: true
 ca_ca_dir: /opt/ca
 ca_ca_days: 3650

molecule/default/converge.yml

@@ -6,7 +6,6 @@
 - name: Converge
   hosts: all
   vars:
-    ca_ca: true
     ca_ca_host: ca_default_centos7
   tasks:
     - name: "Include CA role"

molecule/default/molecule.yml

@@ -11,6 +11,13 @@ platforms:
       - /sys/fs/cgroup:/sys/fs/cgroup:ro
     privileged: true
     pre_build_image: true
+  - name: ca_default_${MOLECULE_DISTRO:-centos7}_client
+    image: "geerlingguy/docker-${MOLECULE_DISTRO:-centos7}-ansible:latest"
+    command: ${MOLECULE_DOCKER_COMMAND:-""}
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+    pre_build_image: true
 provisioner:
   name: ansible
 verifier:

tasks/main.yml

@@ -17,7 +17,7 @@
 
 - name: Set up ca
   import_tasks: ca.yml
-  when: ca_ca | bool
+  when: ca_ca_host == inventory_hostname
 
 - name: Create key
   openssl_privatekey: