openstack/ansible-role-lunasa-hsm
Code Issues Proposed changes
Ansible role to manage Luna SA Hardware Security Module (HSM) client software
19 Commits 10 Branches 24 Tags 286 KiB
Python 100%
5b8127c9ff
Go to file
Douglas Mendizábal 5b8127c9ff Fix vtl verification 
This patch fixes a couple of issues that were causing the NTLS
connection to fail:

* Changed the CN used in the client cert to be the FQDN to ensure that
  the CN and hostname match.

* Modified the scp commands to add the '-O' option to use the legacy scp
  protocol.

Change-Id: I8996872d917ba9cbeaeb2a1c9a25e9db98713252
(cherry picked from commit 5c101144bc)
(cherry picked from commit 757c2e0426)
(cherry picked from commit 0821d23814)
(cherry picked from commit d93586cc73)
(cherry picked from commit 5a92831b80)
(cherry picked from commit 5e2fc97ced)
2023-10-06 15:50:34 -04:00
defaults Add support for High Availability 2020-07-13 15:41:50 -05:00
tasks Fix vtl verification 2023-10-06 15:50:34 -04:00
.gitignore Initial commit 2020-04-23 15:01:05 +00:00
.gitreview Update .gitreview for stable/wallaby 2023-09-26 12:57:48 -04:00
.zuul.yaml Add zuul jobs 2020-04-27 18:47:07 -05:00
AUTHORS Initial commit 2020-04-23 15:01:05 +00:00
LICENSE Initial commit 2020-04-23 15:01:05 +00:00
README.rst Add support for High Availability 2020-07-13 15:41:50 -05:00
requirements.txt Initial commit 2020-04-23 15:01:05 +00:00
setup.cfg Small cleanups 2020-04-29 22:15:32 +02:00
setup.py Initial commit 2020-04-23 15:01:05 +00:00
test-requirements.txt Update .gitreview for stable/wallaby 2023-09-26 12:57:48 -04:00
tox.ini Remove use of ansible_fqdn 2021-06-02 20:20:09 +00:00

README.rst

lunasa-hsm

A role to manage Thales Luna Network Hardware Security Module (HSM) clients.

Role Variables

This ansible role automates the configuration of a new client for the Thales Luna Network HSM.

Name Default Value Description
lunasa_client_working_dir /tmp/lunasa_client_install Working directory in the target host.
lunasa_client_tarball_name None Filename for the Lunasa client software tarball.
lunasa_client_tarball_location None Full URL where a copy of the client software tarball can be downloaded.
lunasa_client_installer_path None Path to the instal.sh script inside the tarball.
lunasa_client_pin None The HSM Partition Password (PKCS#11 PIN) to be used by the client.
lunasa_client_ip None (Optional) When set, this role will use the given IP to register the client instead of the client's fqdn.
lunasa_client_rotate_cert False When set to True, the role will generate a new client certificate to replace the previous one.
lunasa_hsms None List of dictionaries, each of which describes a single HSM see vars.sample.yaml for details. When more than one HSM is listed here, the client will be configured in HA mode.

Requirements

  • ansible >= 2.4