Ansible role to manage Thales Hardware Security Module (HSM) client software
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Ade Lee e82db3b3fc Add support for configuring load_sharing mode 8 months ago
defaults Document role variables and defaults 3 years ago
files Add support for configuring load_sharing mode 7 months ago
handlers Add support for configuring load_sharing mode 7 months ago
releasenotes/notes Add support for configuring load_sharing mode 7 months ago
tasks Add support for configuring load_sharing mode 7 months ago
templates Add support for configuring load_sharing mode 7 months ago
zuul.d Add gate config 3 years ago
.ansible-lint Fix linters 9 months ago
.gitignore Add gate config 3 years ago
.gitreview OpenDev Migration Patch 2 years ago
AUTHORS Initial commit. 3 years ago
LICENSE Initial commit. 3 years ago
README.rst Add support for configuring load_sharing mode 7 months ago
requirements.txt Add files for python build 3 years ago
setup.cfg Use underscore instead of dash 1 year ago
setup.py Add files for python build 3 years ago
test-requirements.txt Add gate config 3 years ago
tox.ini Add gate config 3 years ago
vars.yaml.sample Add support for configuring load_sharing mode 7 months ago

README.rst

thales-hsm

This is a role to manage the client software for Entrust nShield Connect Hardware Security Modules (HSMs).

This repo uses the "Thales" name for historical reasons:

At the time when this repository was created nShield HSMs were owned by Thales. Since then, the nShield line of HSMs have gone through some ownership changes, including nCipher for some time, and currently Entrust.

If you are looking for the ansible role to manage client software for Thales Luna Network HSMs you can find it here:

https://opendev.org/openstack/ansible-role-lunasa-hsm

Role Variables

Name Default Value Description
thales_install_client false Whether the role should install the client software on the target host.
thales_configure_rfs false Whether the role should execute the RFS configuration tasks.
thales_client_working_dir /tmp/thales_client_install Working directory in the target host.
thales_client_gid 42481 Group ID for the thales group.
thales_client_uid 42481 User ID for the thales user.
thales_client_tarball_name None Filename for the Thales client software tarball.
thales_client_tarball_location None Full URL where a copy of the client software tarball can be downloaded.
thales_client_path linux/libc6_11/amd64/nfast Path to the client software directory inside the tarball
thales_km_data_tarball_name None Filename for the KM Data tarball
thales_km_data_location None Full URL where a copy of the KM Data tarball can be downloaded.
thales_rfs_ip_address None IPv4 address for the Thales RFS host.
thales_client_ips None Whitespace separated list of IP addresses to be added to RFS config.
thales_bootstrap_client_ip None Bootstrap client IP address. This IP will be allowed to update RFS server.
nshield_hsms None List of one or more HSM devices

Requirements

  • ansible >= 2.4