Role Name

This role installs and configures CA for the koji setup. This is one of the koji- roles which configures whole koji stack.

Roles are:

Role Variables

There are some variables in the default/main.yml which can (or needs to) be changed/overriden:

ca_name: This is the name of CA. Default is koji.
ssl_cnf_owner: This is the owner of ssl.cnf config file. Default is root.
ssl_cnf_group: This is the group of ssl.cnf config file. Default is root.
ca_root_path: This is the path for CA directory structure that will be created by this role. Default is /etc/pki/koji.
countryName_default: This is the default countryName that goes into CA's certificate. Default is RU.
stateOrProvinceName_default: This is the default stateOrProvinceName that goes into CA's certificate. Default is Moscow.
localityName_default: This is the default localityName that goes into CA's certificate. Default is Moscow.
organizationName_default: This is the default organizationName that goes into CA's certificate. Default is My company.
organizationalUnitName: This is the organizationalUnitName that goes into CA's certificate. Default is IT.
koji_ca_emailAddress: This is the emailAddress that goes into CA's certificate. Default is [email protected].

None

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: koji_ca
  roles:
     - kostyrevaa.koji-ca

GPLv3

Send your suggestions and pull requests to https://github.com/kostyrevaa/ansible-koji-ca. When send PR make sure your changes are backward-compatible. Test your changes to role with https://github.com/kostyrevaa/ansible-koji-infra