hcp-ansible/roles/hashistack_ca/tasks/main.yml

---
# task/main file for hashistack_ca
- name: "CA | Import generate_root.yml"
  ansible.builtin.include_tasks: generate/generate_root.yml
  when: hashistack_ca_generate_root

- name: "CA | Import generate_intermediate.yml"
  ansible.builtin.include_tasks: generate/generate_intermediate.yml
  when: hashistack_ca_generate_intermediate

- name: "CA | Import renew_root.yml"
  ansible.builtin.include_tasks: renew/renew_root.yml
  when: hashistack_ca_renew_root

- name: "CA | Import renew_intermediate.yml"
  ansible.builtin.include_tasks: renew/renew_intermediate.yml
  when: hashistack_ca_renew_intermediate

- name: "CA | Import prepare_ca_to_copy.yml"
  ansible.builtin.include_tasks: prepare_ca_to_copy.yml

- name: "CA | Import cleanup_backups.yml"
  ansible.builtin.include_tasks: cleanup_backups.yml

- name: "Consul leaf certificates | Import generate/generate_consul.yml"
  ansible.builtin.include_tasks: generate/generate_consul.yml
  when:
    - hashistack_ca_generate_leaf
    - "('consul_servers' in group_names) or ('consul_agents' in group_names)"

- name: "Nomad leaf certificates | Import generate/generate_nomad.yml"
  ansible.builtin.include_tasks: generate/generate_nomad.yml
  when:
    - hashistack_ca_generate_leaf
    - "('nomad_servers' in group_names) or ('nomad_clients' in group_names)"

- name: "Vault leaf certificates | Import generate/generate_vault.yml"
  ansible.builtin.include_tasks: generate/generate_vault.yml
  when:
    - hashistack_ca_generate_leaf
    - "'vault_servers' in group_names"

- name: "Consul leaf certificates | Import renew_consul.yml"
  ansible.builtin.include_tasks: renew/renew_consul.yml
  when:
    - hashistack_ca_renew_leaf
    - "('consul_servers' in group_names) or ('consul_agents' in group_names)"

- name: "Nomad leaf certificates | Import renew_nomad.yml"
  ansible.builtin.include_tasks: renew/renew_nomad.yml
  when:
    - hashistack_ca_renew_leaf
    - "('nomad_servers' in group_names) or ('nomad_clients' in group_names)"

- name: "Vault leaf certificates | Import renew_vault.yml"
  ansible.builtin.include_tasks: renew/renew_vault.yml
  when:
    - hashistack_ca_renew_leaf
    - "'vault_servers' in group_names"