Venafi / ansible-collection-venafi

Ansible collection for managing machine identities (certificates and keys) using Venafi
Apache License 2.0
13 stars 7 forks source link

Remove `delegate_to` hardcoded value #44

Open cdmadrigal opened 7 months ago

cdmadrigal commented 7 months ago

PROBLEM SUMMARY Today the delegate_to variable within the local_certificate.yml and remote_certificate.yml file are hardcoded to localhost. This can cause an issue if you're using a remote_user within ansible to execute the playbook.

This will throw a sudo: a password is required\n error.

STEPS TO REPRODUCE Look to enroll a local certificate using a remote_user.

- hosts: test
  remote_user: srv_xxxx
  become: true
  gather_facts: no

EXPECTED RESULTS Certificate is created successfully with the user defined within remote_user.

ACTUAL RESULTS

fatal: [rtest.dev.xxxx.com; -> localhost]: FAILED! => {
    "changed": false,
    "module_stderr": "sudo: a password is required\n",
    "module_stdout": "",
    "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error",
    "rc": 1
}

ENVIRONMENT DETAILS

COMMENTS/WORKAROUNDS Go within the local_certificate.yml and remove the delegate_to variables.