Ansible role to manage Thales Hardware Security Module (HSM) client software
99b3d398e8
A change was introduced to TripleO Heat Templates [1] to expect roles to use underscores instead of dashes in the directory name. [1] https://review.opendev.org/#/c/713792/ Change-Id: I61ee17f7e00e4a5bab5b6b44beb8ea92a93a8058 |
||
---|---|---|
defaults | ||
files | ||
tasks | ||
zuul.d | ||
.gitignore | ||
.gitreview | ||
AUTHORS | ||
LICENSE | ||
README.rst | ||
requirements.txt | ||
setup.cfg | ||
setup.py | ||
test-requirements.txt | ||
tox.ini |
thales-hsm
A role to manage Thales Hardware Security Module (HSM) client software.
Role Variables
Name | Default Value | Description |
---|---|---|
thales_install_client | false | Whether the role should install the client software on the target host. |
thales_configure_rfs | false | Whether the role should execute the RFS configuration tasks. |
thales_client_working_dir | /tmp/thales_client_install | Working directory in the target host. |
thales_client_gid | 42481 | Group ID for the thales group. |
thales_client_uid | 42481 | User ID for the thales user. |
thales_client_tarball_name | None | Filename for the Thales client software tarball. |
thales_client_tarball_location | None | Full URL where a copy of the client software tarball can be downloaded. |
thales_client_path | linux/libc6_11/amd64/nfast | Path tho the client software directory inside the tarball |
thales_km_data_tarball_name | None | Filename for the KM Data tarball |
thales_km_data_location | None | Full URL where a copy of the KM Data tarball can be downloaded. |
thales_hsm_ip_address | None | IPv4 address for the Thales HSM. |
thales_rfs_ip_address | None | IPv4 address for the Thales RFS host. |
thales_hsm_config_location | None | Unique hsm diretory name where the RFS configuration is stored. (e.g. hsm-XXX-XXX-XXX) |
thales_client_ips | None | Whitespace separated list of IP addresses to be added to RFS config. |
thales_bootstrap_client_ip | None | Bootstrap client IP address. This IP will be allowed to update RFS server. |
Requirements
- ansible >= 2.4