3keycompany / ansible-role-czertainly Goto Github PK

View Code? Open in Web Editor NEW

1.0 3.0 1.0 26 KB

Ansible role for installation of CZERTAINLY application using helm chart

License: MIT License

Jinja 100.00%

czertainly-appliance

ansible-role-czertainly's People

Contributors

Stargazers

Watchers

Forkers

semik

ansible-role-czertainly's Issues

fix typo czertacinly => czertainly

configuration option for helm chart version

create keycloak schema

Without keycloak schema inside czertainlydb isn't possible to start keycloak.

CREATE SCHEMA IF NOT EXISTS keycloak AUTHORIZATION czertainlyuser;

add support for email-notification-provider

condition for asserting credential presence is invalid

harbor credentials are required for MS ADCS and utilsService not for keyCloak

playbook fails when czertainly.keycloak is not set

add support for softwareCryptoProvider

add support for HTTP proxy

add custom values editable by user of appliance

do not use full paths in ansible

problem is in

ansible-role-czertainly
ansible-role-rke2

configuration options for selecting CZERTAINLY parts

create kube config for czertainly user

fix error when docker password is not provided

do not use template for copying files

Ansible crashes:

TASK [czertainly : copy default czertainly-values.yaml file] **************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "AnsibleError: template error while templating string: unexpected char '$' at 1165. String: # Default values for czertainly.\n# This is a YAML-formatted file.\n# Declare variables to be passed into your templates.\n\n# Global parameters that will overwrite local parameters\nglobal:\n  config:\n    enabled: true\n  image:\n    registry: \"\"\n    repository: \"\"\n    # array of secret names\n    pullSecrets: []\n  volumes:\n    ephemeral:\n      type: \"\"\n      sizeLimit: \"\"

add support for custom tls certificate

add support for custom trusted certificates

now is playbook using hardcoded path to trusted-certificates.pem file we have to support more


#- debug: var=ansible

# - name: Create openssl.conf
#   template:
#     src: "openssl.j2"
#     dest: "/home/czertainly/openssl.cnf"
#     owner: czertainly
#     group: czertainly
#     mode: '0644'
#   tags:
#     - czertainly
#     - czertainly_app
#     - czertainly_openssl_cnf