search

Venafi / ansible-collection-venafi

Ansible collection for managing machine identities (certificates and keys) using Venafi
Apache License 2.0
14 stars 7 forks source link

Enable support for specifying 'certificate type' when using TPP #35

Open BeardedPrincess opened 1 year ago

BeardedPrincess commented 1 year ago

BUSINESS PROBLEM API requests to TPP's POST certificates/request endpoint that do not specify a certificate type default to a server certificates type in TPP. The certificate type in TPP can have licensing implications, and so it's important to get them categorized properly. Currently, vCert Python SDK does not provide a way to set the certificate type, and as a result, this Ansible collection is not able to specify it either. However, the API endpoint in TPP allows for this.

PROPOSED SOLUTION Add the new variables and logic to support setting the certificate type when requesting certificates from TPP. (This will likely be dependent on https://github.com/Venafi/vcert-python/issues/130

CURRENT ALTERNATIVES Forcibly change the existing certificate type in TPP after they are created on some regular basis using an external script and the API.

BeardedPrincess commented 11 months ago

This was dependent upon the upstream Python library being updated. This was completed (https://github.com/Venafi/vcert-python/issues/130).

Now that dependency has been cleared, the next release of this should include that update.