mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-14 21:42:17 +00:00
59cb7eebd9
This patch fixes handling of password and public_key files, parameter
validation depending on vault type, usage of `salt` attribute and data
retrieval.
Tests were updated to reflect the changes.
New example playbooks are added:
playbooks/vault/vault-is-present-with-password-file.yml
playbooks/vault/vault-is-present-with-public-key-file.yml
playbooks/vault/retrive-data-asymmetric-vault.yml
playbooks/vault/retrive-data-symmetric-vault.yml
28 lines
713 B
YAML
28 lines
713 B
YAML
---
|
|
#
|
|
# Example keys for this playbook were generated with the commands:
|
|
# $ openssl genrsa -out private.pem 2048
|
|
# $ openssl rsa -in private.pem -pubout > public.pem
|
|
#
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: True
|
|
|
|
tasks:
|
|
- copy:
|
|
src: "{{ playbook_dir }}/public.pem"
|
|
dest: "{{ ansible_env.HOME }}/public.pem"
|
|
owner: "{{ ansible_user }}"
|
|
group: "{{ ansible_user }}"
|
|
mode: 0600
|
|
- ipavault:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: asymvault
|
|
username: admin
|
|
vault_type: asymmetric
|
|
vault_public_key_file: "{{ ansible_env.HOME }}/public.pem"
|
|
- file:
|
|
path: "{{ ansible_env.HOME }}/public.pem"
|
|
state: absent
|