|
|
- .. highlight:: yaml
-
- ssh_server
- =========
-
- SSH Certificate
- ---------------
-
- During the execution of this role the vm host key will be used to create a certificate signin request.
-
- This requests will be "posted" to the service known as ca manager and ansible will then wait for a certificate from the same service.
-
- This is accomplished using ssh as a mean of transport, the specific task for a signin requests is alwasys like this
-
- .. code-block:: yaml
-
- - name: generate host request
- set_fact:
- cert_request:
- type: 'sign_request'
- request:
- keyType: 'ssh_host'
- hostName: '{{ vm_name }}'
- keyData: '{{ vm_public_key.text}}'
-
- - name: start sign request
- raw: "{{ cert_request | to_json }}"
- delegate_to: ca_request
- register: request_result
- failed_when: "( request_result.stdout | from_json ).failed"
-
- To sign this certificate an admin must log onto the ca manager machine with the user *sign* and follow the procedure to sign a request with an appropriate certification authority.
|
