Select Git revision
README-cert.md
-
Sam Morris authored
There is a new certificate management module placed in the plugins folder: plugins/modules/ipacert.py The certificate module allows to request, revoke, release and retrieve certificates for users, hosts and services. Here is the documentation for the module: README-cert.md New example playbooks have been added: playbooks/cert/cert-hold.yml playbooks/cert/cert-release.yml playbooks/cert/cert-request-host.yml playbooks/cert/cert-request-service.yml playbooks/cert/cert-request-user.yml playbooks/cert/cert-retrieve.yml playbooks/cert/cert-revoke.yml New tests for the module can be found at: tests/cert/test_cert_client_context.yml tests/cert/test_cert_host.yml tests/cert/test_cert_service.yml tests/cert/test_cert_user.yml The module has been co-authored by Sam Morris (@yrro) and Rafael Guterres Jeffman (@rjeffman).
Sam Morris authoredThere is a new certificate management module placed in the plugins folder: plugins/modules/ipacert.py The certificate module allows to request, revoke, release and retrieve certificates for users, hosts and services. Here is the documentation for the module: README-cert.md New example playbooks have been added: playbooks/cert/cert-hold.yml playbooks/cert/cert-release.yml playbooks/cert/cert-request-host.yml playbooks/cert/cert-request-service.yml playbooks/cert/cert-request-user.yml playbooks/cert/cert-retrieve.yml playbooks/cert/cert-revoke.yml New tests for the module can be found at: tests/cert/test_cert_client_context.yml tests/cert/test_cert_host.yml tests/cert/test_cert_service.yml tests/cert/test_cert_user.yml The module has been co-authored by Sam Morris (@yrro) and Rafael Guterres Jeffman (@rjeffman).
env_setup.yml 1.31 KiB
---
# Tasks executed to ensure a sane environment to test IPA Vault module.
- name: Ensure environment is clean.
import_tasks: env_cleanup.yml
- name: Create private/public key pair.
shell:
cmd: |
openssl genrsa -out "{{ item }}private.pem" 2048
openssl rsa -in "{{ item }}private.pem" -outform PEM -pubout -out "{{ item }}public.pem"
base64 "{{ item }}public.pem" -w5000 > "{{ item }}public.b64"
base64 "{{ item }}private.pem" -w5000 > "{{ item }}private.b64"
delegate_to: localhost
become: no
with_items:
- A_
- B_
- name: Copy files to target host.
copy:
src: "{{ playbook_dir }}/{{ item }}"
dest: "{{ ansible_env.HOME }}/{{ item }}"
with_items:
- A_private.pem
- A_public.pem
- B_private.pem
- B_public.pem
- A_private.b64
- A_public.b64
- B_private.b64
- B_public.b64
- password.txt
- in.txt
- name: Ensure vaultgroup exists.
ipagroup:
ipaadmin_password: SomeADMINpassword
name: vaultgroup
- name: Ensure testing users exist.
ipauser:
ipaadmin_password: SomeADMINpassword
users:
- name: user01
first: First
last: Start
- name: user02
first: Second
last: Middle
- name: user03
first: Third
last: Last