ansible-pki
ansible-pki copied to clipboard
debops
Bootstrap and manage internal PKI, Certificate Authorities and OpenSSL/GnuTLS certificates
Maybe it's just me, but the whole system seems really brittle and every time it breaks it makes me wish I could just run certbot and be done with it....
I'm trying to generate a Let's Encrypt certificate for a domain but I'm not having any luck. I consulted the numerous other issues related to the pki role but I...
Hi. Like the title says. I was previously using the reference playbook to perform PKI certificate creation and exchange in a 4 node cluster. So I'm pretty sure my playbook...
I love debops and I even saw ACME work once, but I have to say it is super hard to get it working. I've never had this kind of difficulty...
I think since yesterday after a debops-update the pki role failed with every second run: TASK [debops.pki : Sign certificate requests for current hosts] ************************************************************************************************************************************** fatal: [teamcity -> localhost]: FAILED!...
TASK [debops.pki : Sign certificate requests for current hosts] ************************************************************************************ fatal: [node1.domain]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has...
Hi, Running `debops` on a new host `host1` results in failure of `debops.pki`. ```sh TASK [debops.pki : DebOps pre_tasks hook] ************************************** An exception occurred during task execution. To see the...
If an external certificate expires and get's renewed and replaced on the controller, the new certificate does not get copied to the host. This is because the relevant copy task...
The vulnerability goes in the same direction as other vulns on https://www.ansible.com/security which are compromised remote hosts exploiting the Ansible controller. Steps to reproduce: ```YAML pki_ca_domain: 'example.org' pki_ca_organization: 'example' pki_default_authority:...
