Go to file
2024-01-08 12:56:23 +03:00
defaults change default cacert path to /opt/cacert 2023-11-25 14:12:13 +03:00
meta add per host for groups certs 2022-09-15 14:06:34 +03:00
tasks mode 0644 for ca crt 2024-01-08 12:56:23 +03:00
.gitignore add meta and gitignore 2022-09-09 13:08:03 +03:00
README.md add per host for groups certs 2022-09-15 14:06:34 +03:00

Inventory example:

cacert_ca_name: "myCA"
cacert_ca_trust_anchors_update: True

cacert_ca_copy_to:
  hosts:
    - { host: "server-1", path: "/opt/certs" }
    - { host: "server-2", path: "/opt/certs" }
  groups:
    - { group: "cacert_clients", path: "/opt/certs" }
    - { group: "mygroupname1", path: "/opt/certs" }

cacert_cn_certs:
  - name: mycertname.example.com
    hosts:
      - { host: "server-1", path: "/opt/certs" }
      - { host: "server-2", path: "/opt/certs" }
      - { host: "server-1", path: "/opt/certs", concat: "pem" }
      - { host: "server-2", path: "/opt/certs", concat: "pem" }
    groups:
      - { group: "cacert_clients", path: "/opt/certs" }
      - { group: "mygroupname1", path: "/opt/certs" }

cacert_group_certs:
  - name: mygroupcert.example.com
    append_groups:
      - consul
      - patroni
    hosts:
      - { host: "server-1", path: "/opt/certs" }
      - { host: "server-2", path: "/opt/certs" }
      - { host: "server-1", path: "/opt/certs", concat: "pem" }
      - { host: "server-2", path: "/opt/certs", concat: "pem" }
    groups:
      - { group: "cacert_clients", path: "/opt/certs" }
      - { group: "mygroupname1", path: "/opt/certs" }

cacert_per_host_certs:
  groups:
    - { group: "mygroupname1", path: "/opt/koji/certs", concat: "pem" }