ocp-trust-private-registry.yml

# extract private registry CA or cert to a crt file

---           
- hosts: all
  become: yes

  vars:
    private_registry_fqdn: registry.example.com

  tasks:

    - name: Copy cert to ca-certs
      copy:
        src: "{{ private_registry_fqdn }}.crt"
        dest: "/etc/pki/ca-trust/source/anchors/{{ private_registry_fqdn }}.crt"

    - command: update-ca-trust

    - name: Create registry cert dir 
      file:
        name: "/etc/docker/certs.d/{{ private_registry_fqdn }}"
        state: directory

    - name: Copy other cert
      copy:
        src: "{{ private_registry_fqdn }}.crt"
        dest: "/etc/docker/certs.d/{{ private_registry_fqdn }}/ca.crt"

    - name: Restart docker 
      service:
        name: docker
        state: restarted