ansible-role-generate-tls-c.../tasks/main.yml

---
# tasks file for generate-tls-certs
- name: Generate CA cert
  include_tasks: generate-ca-cert.yaml
  when:
    - gen_tls_generate_certs
    - gen_tls_generate_ca_cert|bool

- name: Generate client cert
  include_tasks: generate-client-cert.yaml
  when:
    - gen_tls_generate_certs
    - gen_tls_generate_client_cert|bool

- name: Generate server cert
  include_tasks: generate-server-cert.yaml
  when:
    - gen_tls_generate_certs
    - gen_tls_generate_server_cert|bool

- name: Populate /etc/hosts with inventory's hosts
  include_tasks: populate-etc-hosts.yaml
  when: gen_tls_populate_etc_hosts|bool

- name: Update system CA on Debian
  include_tasks: update-debian-ca.yaml
  when:
    - gen_tls_generate_certs
    - ansible_os_family == "Debian"
Initial commit 2018-04-20 10:40:41 +02:00			`---`
			`# tasks file for generate-tls-certs`
Update with community.crypto collection modules 2021-01-24 00:20:24 +01:00			`- name: Generate CA cert`
			`include_tasks: generate-ca-cert.yaml`
			`when:`
Add pseudo-namespace to variables 2021-01-24 13:16:15 +01:00			`- gen_tls_generate_certs`
			`- gen_tls_generate_ca_cert\|bool`
Initial commit 2018-04-20 10:40:41 +02:00
Update with community.crypto collection modules 2021-01-24 00:20:24 +01:00			`- name: Generate client cert`
			`include_tasks: generate-client-cert.yaml`
			`when:`
Add pseudo-namespace to variables 2021-01-24 13:16:15 +01:00			`- gen_tls_generate_certs`
			`- gen_tls_generate_client_cert\|bool`
Split tasks 2018-04-22 11:02:16 +02:00
Update with community.crypto collection modules 2021-01-24 00:20:24 +01:00			`- name: Generate server cert`
			`include_tasks: generate-server-cert.yaml`
			`when:`
Add pseudo-namespace to variables 2021-01-24 13:16:15 +01:00			`- gen_tls_generate_certs`
			`- gen_tls_generate_server_cert\|bool`
Optionally fill /etc/hosts 2021-01-24 12:50:08 +01:00
			`- name: Populate /etc/hosts with inventory's hosts`
			`include_tasks: populate-etc-hosts.yaml`
Add pseudo-namespace to variables 2021-01-24 13:16:15 +01:00			`when: gen_tls_populate_etc_hosts\|bool`
Change CA cert format and add force copy option The certificate form of the CA has to be crt to be sure it is manageable by the Debian update-ca-certificates executable. Also, added option to force the copy of the certificates, also if the local files did not change. 2021-01-24 22:37:47 +01:00
			`- name: Update system CA on Debian`
			`include_tasks: update-debian-ca.yaml`
			`when:`
			`- gen_tls_generate_certs`
			`- ansible_os_family == "Debian"`