search

splunk / splunk-platform-automator

Ansible framework providing a fast and simple way to spin up complex Splunk environments.
Apache License 2.0
117 stars 46 forks source link

Enable the user to put certificates into a vault #30

Open dglauche opened 2 years ago

dglauche commented 2 years ago

I think it would be great to have the certificates (with keys) stored within an ansible vault. As far as I can see thats currently not possible. To keep the changes as small as possible I would propose to extract them on the manager host before everything starts runnings and remove them afterwards. Introducing a new config setting like {web,server}_cert_in_vault: true/false for the purpose would be a good choice.

What do others think about that approach? I would be happy to write a PR for that!

splunkenizer commented 2 years ago

This is on the todo list for some time already. I wanted to add a capability to put all secret stuff into a vault. Also passwords and secrets which are used within the playbooks. From a security perspective I think pulling them directly from the vault and sending them over without storing would be the best solution.