renew_vault_certificates/tasks/prerequisites.yml

38 lines
1.3 KiB
YAML

---
# task/prerequisites file for renew_vault_certificates
- name: "Install required roles"
ansible.builtin.command:
cmd: "ansible-galaxy install {{ item }}"
loop: "{{ renew_vault_certificates_prerequisites_roles }}"
changed_when: false
become: false
delegate_to: localhost
run_once: true
- name: "Create directory {{ renew_vault_certificates_config_dir }}"
ansible.builtin.file:
path: "{{ renew_vault_certificates_config_dir }}"
state: directory
owner: "{{ renew_vault_certificates_vault_user }}"
group: "{{ renew_vault_certificates_vault_group }}"
mode: '0755'
- name: "Create directory templates directory in {{ renew_vault_certificates_config_dir }}"
ansible.builtin.file:
path: "{{ renew_vault_certificates_config_dir }}/templates"
state: directory
owner: "{{ renew_vault_certificates_vault_user }}"
group: "{{ renew_vault_certificates_vault_group }}"
mode: '0755'
- name: "Ensure certificate/key directory(ies) exist(s)"
ansible.builtin.file:
path: "{{item | dirname }}"
state: directory
owner: "{{ renew_vault_certificates_vault_user }}"
group: "{{ renew_vault_certificates_vault_group }}"
mode: '0755'
loop:
- "{{ renew_vault_certificates_cert_dest }}"
- "{{ renew_vault_certificates_key_dest }}"