de-it-krachten/ansible-role-rootca
1
0
Fork 0
mirror of https://github.com/de-it-krachten/ansible-role-rootca synced 2026-05-14 03:51:37 +00:00
Code Issues Projects Releases Packages Wiki Activity
No description
76 commits 2 branches 14 tags 174 KiB
  • Jinja 100%
Find a file
Exact
semantic-release-bot 339cdb0ee2 chore(release): 1.11.0 [skip ci] 
# [1.11.0](https://github.com/de-it-krachten/ansible-role-rootca/compare/v1.10.0...v1.11.0) (2026-03-15)

### Features

* Added support for Fedora 43 ([6a1e91f](6a1e91fd5a))
* Drop support for Fedora 41 ([93d4968](93d4968cb7))
* Drop support for openSUSE Leap 15 ([b8fde88](b8fde880a0))
* Drop support for SUSE Linux Enterprise 15 ([623227c](623227c716))
2026-03-15 14:31:55 +00:00
.github/workflows Update CI 2026-03-14 19:58:47 +01:00
defaults fix: Fix for faulty certificate file naming 2024-10-11 18:54:03 +02:00
files Add support for Debian/Ubuntu + implement molecule 2021-10-22 12:49:02 +02:00
handlers Fix linting issues 2023-05-06 01:25:21 +02:00
meta Update CI 2026-03-14 19:58:47 +01:00
molecule/default Update CI 2026-03-14 19:58:47 +01:00
tasks fix: Fix for faulty certificate file naming 2024-10-11 18:54:03 +02:00
.ansible-lint feat: Update CI to latest standards 2022-10-09 23:06:19 +02:00
.cicd Update CI 2026-03-06 23:07:13 +01:00
.cicd.overwrite Update CI 2026-03-14 19:58:47 +01:00
.collections feat: Add support for Ubuntu 24.04 LTS + Fedora 40 2024-05-31 23:45:05 +02:00
.gitignore feat: Update supported platforms & CI 2024-12-29 12:42:26 +01:00
.releaserc.yml Update CI 2026-03-06 23:07:13 +01:00
.roles feat: Update CI to latest standards 2022-10-09 23:06:19 +02:00
.yamllint feat: Update supported platforms & CI 2024-12-29 12:42:26 +01:00
CHANGELOG.md chore(release): 1.11.0 [skip ci] 2026-03-15 14:31:55 +00:00
README.md Update CI 2026-03-14 19:58:47 +01:00

README.md

CI

ansible-role-rootca

Provisions list of rootCA SSL certificates

Dependencies

Roles

None

Collections

  • ansible.windows

Platforms

Supported platforms

  • Red Hat Enterprise Linux 81
  • Red Hat Enterprise Linux 91
  • Red Hat Enterprise Linux 101
  • RockyLinux 8
  • RockyLinux 9
  • RockyLinux 10
  • OracleLinux 8
  • OracleLinux 9
  • OracleLinux 10
  • AlmaLinux 8
  • AlmaLinux 9
  • AlmaLinux 10
  • Debian 11 (Bullseye)
  • Debian 12 (Bookworm)
  • Debian 13 (Trixie)
  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS
  • Fedora 42
  • Fedora 43
  • Alpine 3
  • Windows Server 2012 R21
  • Windows Server 20161
  • Windows Server 20191
  • Windows Server 20221

Note: 1 : no automated testing is performed on these platforms

Role Variables

defaults/main.yml


# List of root certificate files
# rootca_certificates: []

# Url to be used for testing
rootca_test_url: ''

# Should we fail if the test fails?
rootca_test_fail: true

defaults/Alpine.yml


# File extention to use (pem/crt)
rootca_ext: crt

# Directory to place root certificates into
rootca_directory: /usr/local/share/ca-certificates

# Command to execute to make OS import CA certificates
rootca_update_cmd: update-ca-certificates

defaults/family-Debian.yml


# File extention to use (pem/crt)
rootca_ext: crt

# Directory to place root certificates into
rootca_directory: /usr/share/ca-certificates/extra

# Command to execute to make OS import CA certificates
rootca_update_cmd: update-ca-certificates

defaults/family-RedHat.yml


# File extention to use (pem/crt)
rootca_ext: pem

# Directory to place root certificates into
rootca_directory: /etc/pki/ca-trust/source/anchors

# Command to execute to make OS import CA certificates
rootca_update_cmd: update-ca-trust

defaults/family-Suse.yml


# File extention to use (pem/crt)
rootca_ext: pem

# Directory to place root certificates into
rootca_directory: /etc/pki/trust/anchors

# Command to execute to make OS import CA certificates
rootca_update_cmd: update-ca-certificates

defaults/family-Windows.yml


# File extention to use (pem/crt)
rootca_ext: pem

defaults/Rocky.yml


# File extention to use (pem/crt)
rootca_ext: pem

# Directory to place root certificates into
rootca_directory: /etc/pki/ca-trust/source/anchors

# Command to execute to make OS import CA certificates
rootca_update_cmd: update-ca-trust

Example Playbook

molecule/default/converge.yml


- name: sample playbook for role 'rootca'
  hosts: all
  become: 'yes'
  vars:
    molecule_driver: '{{ lookup(''env'', ''MOLECULE_DRIVER_NAME'') }}'
    rootca_certificates:
      - tests/root1.crt
      - tests/root2.pem
  tasks:
    - name: Include role 'rootca'
      ansible.builtin.include_role:
        name: rootca