# flake8: noqa
# pylint: skip-file

DOCUMENTATION = '''
---
module: oc_adm_csr
short_description: Module to approve or deny openshift certificate signing requests
description:
  - Wrapper around the openshift `oc adm certificate approve|deny <csr>` command.
options:
  state:
    description:
    - State controls the action that will be taken with resource
    - approve - create the certificate
    - deny - remove the certificate
    - list - return the current representation of a certificate
    required: false
    default: approve
    choices: ["approve", "deny", "list"]
    aliases: []
  kubeconfig:
    description:
    - The path for the kubeconfig file to use for authentication
    required: false
    default: /etc/origin/master/admin.kubeconfig
    aliases: []
  debug:
    description:
    - Turn on debug output.
    required: false
    default: False
    aliases: []
  nodes:
    description:
    - A list of the names of the nodes in which to accept the certificates
    required: false
    default: None
    aliases: []
  timeout:
    description:
    - This flag allows for a timeout value when approving nodes.
    required: false
    default: 30
    aliases: []
  timeout:
    description:
    - This flag allows for a timeout value when doing node approvals.
    - A zero value for the timeout will block until the nodes have been accepted
    required: false
    default: 30
    aliases: []
  approve_all:
    description:
    - This flag allows for the module to approve all CSRs that are found.
    - This facilitates testing.
    required: false
    default: False
    aliases: []
  service_account:
    description:
    - This parameter tells the approval process which service account is being used for the requests
    required: false
    default: node-bootstrapper
    aliases: []
author:
- "Kenny Woodson <kwoodson@redhat.com>"
extends_documentation_fragment: []
'''

EXAMPLES = '''
- name: Approve certificates for node xyz
  oc_adm_scr:
    nodes:
    - xyz
    timeout: 300

- name: Approve certificates for node xyz
  oc_adm_scr:
    nodes:
    - xyz
    timeout: 0
'''
