ansible-roles/pki/tasks/main.yml

---

# Prerequisites
# TODO Python packages may need to be differente based on debian version
- name: Install python 2 cryptography
  apt:
    name: python-cryptography
    state: present
  when: ansible_python_version is version('3', '<')

- name: Install python 3 cryptography
  apt:
    name: python3-cryptography
    state: present
  when: ansible_python_version is version('3', '>=')

- name: Creates PKI tree directories
  file:
    path: "{{ item }}"
    mode: "0700"
    state: directory
  loop:
    - "{{ pki_dir }}/certs"
    - "{{ pki_dir }}/private"


# Create Certificate Authority (CA)
- include: ca.yml
  when:
    - not ansible_check_mode
    - inventory_hostname == pki_ca_host


# Create a certificate signed by the CA
- include: signed_certificate.yml