cacert/defaults/main.yaml

cacert_ca_group: cacert_ca
cacert_clients_group: cacert_clients
cacert_ssl_gen_path: "/tmp/cacert"
cacert_ca_name: "myCA"
cacert_ca_trust_anchors_update: False

#cacert_ca_copy_to:
#  hosts:
#    - { host: "server-1", path: "/opt/certs" }
#    - { host: "server-2", path: "/opt/certs" }
#  groups:
#    - { group: "cacert_clients", path: "/opt/certs" }
#    - { group: "mygroupname", path: "/opt/certs" }
#
#cacert_cn_certs:
#  - name: mycertname.example.com
#    hosts:
#      - { host: "server-1", path: "/opt/certs" }
#      - { host: "server-2", path: "/opt/certs" }
#      - { host: "server-1", path: "/opt/certs", concat: "pem" }
#      - { host: "server-2", path: "/opt/certs", concat: "pem" }
#    groups:
#      - { group: "cacert_clients", path: "/opt/certs" }
#      - { group: "mygroupname", path: "/opt/certs" }
#
#cacert_group_certs:
#  - name: mygroupcert
#    host_groups:
#      - consul
#      - patroni
#    hosts:
#      - { host: "server-1", path: "/opt/certs" }
#      - { host: "server-2", path: "/opt/certs" }
#      - { host: "server-1", path: "/opt/certs", concat: "pem" }
#      - { host: "server-2", path: "/opt/certs", concat: "pem" }
#    groups:
#      - { group: "cacert_clients", path: "/opt/certs" }
#      - { group: "mygroupname", path: "/opt/certs" }