ansible-host-certificate/tasks/main.yml

42 lines
1.4 KiB
YAML

- name: Install JQ
apt: name=jq state=latest update_cache=yes
- name: Copy CA file to local Trusted root CA store
copy: src="ca.crt" dest="/etc/ssl/certs/my-ca.crt"
#ags: certificate
#Step1 - Check if certificate file is in place
- name: Check that the host certificate exists
stat:
path: /etc/ssl/private/{{inventory_hostname}}.{{local_domainname}}.key
register: stat_result
tags: certificate
- debug: msg="File does not exist.. Running request script"
tags: certificate
when: stat_result.stat is defined and not stat_result.stat.exists
- debug: msg="File exists, skipping"
tags: certificate
when: stat_result.stat is defined and stat_result.stat.exists
#Step2 - If certificate does not exist, copy down the batch file
- name: "Copy certificate request script to /tmp ready for execution"
template: src="requestCertificate.sh.j2" dest=/tmp/reqCrt.sh mode=0700
when: stat_result.stat is defined and not stat_result.stat.exists
tags: certificate
#Step3 - Execute the batch file with environment variables
- name: Request new certificate from Vault
shell: /tmp/reqCrt.sh
environment:
VAULT_ADDR: "{{ vault_address }}"
VAULT_TOKEN: "{{ vault_token }}"
VAULT_UNSEAL_KEY1: "{{ vault_unseal_key1 }}"
VAULT_UNSEAL_KEY2: "{{ vault_unseal_key2 }}"
VAULT_UNSEAL_KEY3: "{{ vault_unseal_key3 }}"
when: stat_result.stat is defined and not stat_result.stat.exists
tags: certificate