37 lines
1.3 KiB
YAML
37 lines
1.3 KiB
YAML
---
|
|
# task/prerequisites file for renew_vault_certificates
|
|
- name: "Install required roles"
|
|
ansible.builtin.command:
|
|
cmd: "ansible-galaxy install {{ item }}"
|
|
loop: "{{ renew_vault_certificates_prerequisites_roles }}"
|
|
changed_when: false
|
|
delegate_to: localhost
|
|
run_once: true
|
|
|
|
- name: "Create directory {{ renew_vault_certificates_config_dir }}"
|
|
ansible.builtin.file:
|
|
path: "{{ renew_vault_certificates_config_dir }}"
|
|
state: directory
|
|
owner: "{{ renew_vault_certificates_vault_user }}"
|
|
group: "{{ renew_vault_certificates_vault_group }}"
|
|
mode: '0755'
|
|
|
|
- name: "Create directory templates directory in {{ renew_vault_certificates_config_dir }}"
|
|
ansible.builtin.file:
|
|
path: "{{ renew_vault_certificates_config_dir }}/templates"
|
|
state: directory
|
|
owner: "{{ renew_vault_certificates_vault_user }}"
|
|
group: "{{ renew_vault_certificates_vault_group }}"
|
|
mode: '0755'
|
|
|
|
- name: "Ensure certificate/key directory(ies) exist(s)"
|
|
ansible.builtin.file:
|
|
path: "{{item | dirname }}"
|
|
state: directory
|
|
owner: "{{ renew_vault_certificates_vault_user }}"
|
|
group: "{{ renew_vault_certificates_vault_group }}"
|
|
mode: '0755'
|
|
loop:
|
|
- "{{ renew_vault_certificates_cert_dest }}"
|
|
- "{{ renew_vault_certificates_key_dest }}"
|