[ansible/artifactory] Allow to configure custom trusted certificates about jfrog-cloud-installers HOT 5 OPEN

@jcoste-orange Thanks for reaching out ! can you share more information with an example

from jfrog-cloud-installers.

Our S3 server is using a self signed certificate.
So we have to store the certificate in /opt/jfrog/artifactory/var/etc/security/keys/trusted/.

Today we have to patch the role to add a task like this :

    - name: copy custom cert
      become: true
      ansible.builtin.copy:
        src: "<local_custom_cert.crt>"
        dest: "/opt/jfrog/artifactory/var/etc/security/keys/trusted/custom.crt"
        owner: "{{ artifactory_user }}"
        group: "{{ artifactory_group }}"
        mode: 0600
        remote_src: true

from jfrog-cloud-installers.

The variables to do this are documentented in this README.md

If you install your own certs, then you can set any path to the key and cert, and set the boolean ssl_certificate_install: false. I prefer to use a subdir under /etc/pki/tls, and not in the product directory.

from jfrog-cloud-installers.

No, ssl_certificate_install is to install the certificate that will be used (exposed) by NGinx.
What we need is [this] (https://jfrog.com/help/r/artifactory-how-to-debug-ssl-issues-with-artifactory/what-is-the-process-for-importing-ssl-certificates-into-the-jvm-keystore).
So I need to be able to put some certificates in /opt/jfrog/artifactory/var/etc/security/keys/trusted/

from jfrog-cloud-installers.

Ok, clear. You could deploy with this variable, and start it after you placed the cert there:

artifactory_start_service: false

from jfrog-cloud-installers.