sinetris.tools.pki role – Role to create PKIs

Note

This role is part of the sinetris.tools collection (version 0.1.4).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it use: ansible-galaxy collection install sinetris.tools.

To use it in a playbook, specify: sinetris.tools.pki.

Entry point main – Role to create PKIs

New in sinetris.tools 0.1.0

Synopsis

  • Role to create PKIs

Parameters

Parameter

Comments

pki_action

string / required

Action to perform

Choices:

  • "prepare"

  • "create-cert"

  • "create-ca"

pki_ca_base_data_dir

string

Directory used to store the project PKI generated files

Default: "{{ pki_ca_base_dir }}/{{ pki_project }}/ca"

pki_ca_base_dir

string

Base directory used to store PKI related files for the project

Default: "$HOME/.local/pki"

pki_ca_identifier

string

Certificate Authority (CA) identifier

Default: "example-ca"

pki_ca_issuer

string

Issuer Certificate Authority (CA) identifier

Required when creating Intermediate CA

pki_ca_type

string / required

CA type

Choices:

  • "root-ca"

  • "intermediate-ca"

  • "signing-ca"

pki_cert_type

string / required

Certificate type

Choices:

  • "self-signed-cert"

  • "ca-cert"

  • "cross-cert"

  • "leaf-cert"

pki_config_dir

string

Directory used to store the config files for the PKI project

Default: "{{ pki_ca_base_dir }}/{{ pki_project }}/.config"

pki_dir_group

string

Name of the group that should own the directory for the PKI project

Default: "{{ ansible_user }}"

pki_dir_owner

string

Name of the user that should own the directory for the PKI project

Default: "{{ ansible_user }}"

pki_project

string / required

A project name for the PKI

Authors

  • Duilio Ruggiero