freeipa / ansible-freeipa

Ansible roles and modules for FreeIPA
GNU General Public License v3.0
482 stars 230 forks source link

[RFE] Support for monitoring certificates #1214

Open CendioHalim opened 5 months ago

CendioHalim commented 5 months ago

When using the ipacert module to request a new certificate for a service, it would be nice if there was an option to also start tracking the certificate. Currently, I believe you manually have to run ipa-getcert start-tracking -k <key> -f <cert> for this to happen.

Is there any way to do this via some module, or is running a command the only way to do this currently?

rjeffman commented 4 months ago

With ansible-freipa it is not possible, as of now. You may try the [Certificate Linux System Role], but I'm not sure it does what you want.