_To report a problem or share an idea, use Issues; and if you have a suggestion for fixing the issue, please include those details, too. In addition, use Pull Requests to contribute actual bug fixes or proposed enhancements.
We welcome and appreciate all contributions. Got questions or want to discuss something with our team?
Join us on Slack!_
This collection, called machine_identity
, uses Venafi Trust Protection Platform or Venafi as a Service to provide keys and certificates to Ansible solutions that require machine identity management.
If you like this collection, please give us a rating on Ansible Galaxy.
Review the Venafi
prerequisites, then install Ansible and VCert-Python (v0.11.2 or higher) using pip
:
pip install ansible vcert --upgrade
This collection depends on vcert-python. Due to this, collection requires Python 3.6 or greater.
Venafi has also announced the end of support for Python less than 3.6. As such support for Python less than 3.6 by this collection has been deprecated.
This collection has been tested against the following Ansible versions: >= 2.13
You can install the venafi.machine_identity collection with the Ansible Galaxy CLI:
ansible-galaxy collection install venafi.machine_identity
You can also include it in a requirements.yml
file and install it with ansible-galaxy collection install -r requirements.yml
, using the format:
---
collections:
- name: venafi.machine_identity
A specific version of the collection can be installed by using the version
keyword in the requirements.yml
file:
---
collections:
- name: venafi.machine_identity
version: 0.10.0
The python module dependencies are not installed by ansible-galaxy
. They can
be manually installed using pip:
pip install -r requirements.txt
or:
pip install vcert ansible cryptography
venafi.machine_identity.certificate
: Enrolls a certificate and optionally deploys it to a remote location.venafi.machine_identity.policy
: Creates or updates certificate policy on VaaS or TPP using a specification file.venafi.machine_identity.ssh_certificate
: Enrolls an SSH certificate using Trust Protection Platform.venafi.machine_identity.ssh_ca
: Retrieves public keys of SSH certificate authorities hosted by TPP.Copyright © Venafi, Inc. All rights reserved.
This solution is licensed under the Apache License, Version 2.0. See LICENSE
for the full license text.
Please direct questions/comments to opensource@venafi.com.