abstract	authors	date	title
The readme for some Ansible playbooks that have the goal of deploying a Root Certificate Authority to a Linux host.	Xander Harris	2024-03-08	Ansible CA Readme

Assumptions

The default configuration assumes a vault password exists at {file}/etc/ansible/vault. It also assumes the inventory file is in YAML format and located at {file}/etc/ansible/hosts.yaml

Fact Caching

The default configuration uses fact caching with Redis running on the controller with the default port.

Usage

You can find an example inventory file below, this inventory is intended to house a Kubernetes cluster with a pair of control planes that are members of a Samba Active Directory Domain that contains a pair of controllers and is responsible for authentication, file, and routing services.

:caption: /etc/ansible/hosts.yaml

dc:
  hosts:
    dc01.example.com:
      ansible_user: user
    dc02.example.com:
      ansible_user: user
np:
  hosts:
    napalm.example.com:
      ansible_user: user
kcp:
  hosts:
    kcp01.example.com:
      ansible_user: user
    kcp02.example.com:
      ansible_user: user
ca:
  hosts:
    ca.example.com:
      ansible_user: user
      secret_ca_passphrase: secret-ca-passphrase

:caption: Other Information

cicd
license
security