Add certificate generation

This commit is contained in:
Patrick Toal
2019-08-31 19:22:32 -04:00
parent 1a207029eb
commit fa2d28367a
37 changed files with 2315 additions and 2 deletions

View File

@@ -1,6 +1,41 @@
---
# Probably want to split this out into a proper certificate management role for Toal.ca
- name: Request TLS Certificate from LetsEncrypt
hosts: rhv.mgmt.toal.ca
connection: local
gather_facts: false
# This doesn't belong here
vars:
acme_email: ptoal@takeflight.ca
challenge: dns-01
dns_provider: dme
domains:
- rhv.mgmt.toal.ca
pre_tasks:
- name: Ensure Let's Encrypt Account Exists
acme_account:
state: present
terms_agreed: true
allow_creation: true
contact:
- mailto:ptoal@takeflight.ca
account_key_content: "{{ acme_key }}"
acme_version: 2
roles:
- acme-certificate
# - name: Install custom CA Certificate in RHV-M
# hosts: rhv.lab.toal.ca
# tasks:
# - name: Download LetsEncrypt Root/Intermediate Certificates
- name: Create RHV/ovirt VLANs
hosts: rhv.lab.toal.ca
hosts: rhv.mgmt.toal.ca
connection: local
vars:
# Hack to work around virtualenv python interpreter
@@ -11,7 +46,7 @@
fetch_nested: true
data_center: "{{ item.data_center }}"
name: "{{ item.name }}"
vlan_tag: "{{ item.vlan_tag }}"
vlan_tag: "{{ item.vlan_tag|default(omit) }}"
vm_network: "{{ item.vm_network }}"
mtu: "{{ item.mtu }}"
description: "{{ item.description }}"