openstack/ansible-role-lunasa-hsm
Code Issues Proposed changes
Ansible role to manage Luna SA Hardware Security Module (HSM) client software
11 Commits 10 Branches 26 Tags 294 KiB
Python 100%
b4eaaeb9cc
Go to file
Douglas Mendizábal b4eaaeb9cc Add support for High Availability 
This patch adds the ability to configure the Luna Network HSM
client to use more than one HSM for high availability (HA) mode.

Change-Id: If0eb393ca970206cc95c7453641f33781eb698b2
2020-07-13 15:41:50 -05:00
defaults Add support for High Availability 2020-07-13 15:41:50 -05:00
tasks Add support for High Availability 2020-07-13 15:41:50 -05:00
.gitignore Initial commit 2020-04-23 15:01:05 +00:00
.gitreview Add zuul jobs 2020-04-27 18:47:07 -05:00
.zuul.yaml Add zuul jobs 2020-04-27 18:47:07 -05:00
AUTHORS Initial commit 2020-04-23 15:01:05 +00:00
LICENSE Initial commit 2020-04-23 15:01:05 +00:00
README.rst Add support for High Availability 2020-07-13 15:41:50 -05:00
requirements.txt Initial commit 2020-04-23 15:01:05 +00:00
setup.cfg Small cleanups 2020-04-29 22:15:32 +02:00
setup.py Initial commit 2020-04-23 15:01:05 +00:00
test-requirements.txt Initial commit 2020-04-23 15:01:05 +00:00
tox.ini Small cleanups 2020-04-29 22:15:32 +02:00

README.rst

lunasa-hsm

A role to manage Thales Luna Network Hardware Security Module (HSM) clients.

Role Variables

This ansible role automates the configuration of a new client for the Thales Luna Network HSM.

Name Default Value Description
lunasa_client_working_dir /tmp/lunasa_client_install Working directory in the target host.
lunasa_client_tarball_name None Filename for the Lunasa client software tarball.
lunasa_client_tarball_location None Full URL where a copy of the client software tarball can be downloaded.
lunasa_client_installer_path None Path to the instal.sh script inside the tarball.
lunasa_client_pin None The HSM Partition Password (PKCS#11 PIN) to be used by the client.
lunasa_client_ip None (Optional) When set, this role will use the given IP to register the client instead of the client's fqdn.
lunasa_client_rotate_cert False When set to True, the role will generate a new client certificate to replace the previous one.
lunasa_hsms None List of dictionaries, each of which describes a single HSM see vars.sample.yaml for details. When more than one HSM is listed here, the client will be configured in HA mode.

Requirements

  • ansible >= 2.4