{"id":19963678,"url":"https://github.com/cyberark/psmp-activate-ansible-role","last_synced_at":"2025-06-17T14:35:09.520Z","repository":{"id":46814190,"uuid":"386665354","full_name":"cyberark/psmp-activate-ansible-role","owner":"cyberark","description":"Ansible role to activate Cyberark Privileged Session Manager SSH Proxy (PSM-SSH)","archived":false,"fork":false,"pushed_at":"2023-08-01T23:34:57.000Z","size":30,"stargazers_count":3,"open_issues_count":4,"forks_count":3,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-05-03T22:36:54.581Z","etag":null,"topics":["ansible-role","automation","conjbot-skip-stalepr","cyberark"],"latest_commit_sha":null,"homepage":"https://www.cyberark.com/products/privileged-access/","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cyberark.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-07-16T14:29:37.000Z","updated_at":"2024-03-09T14:34:11.000Z","dependencies_parsed_at":"2025-05-03T22:32:50.729Z","dependency_job_id":"2c2e59d6-1f89-436e-9248-9290493b13c5","html_url":"https://github.com/cyberark/psmp-activate-ansible-role","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cyberark/psmp-activate-ansible-role","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyberark%2Fpsmp-activate-ansible-role","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyberark%2Fpsmp-activate-ansible-role/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyberark%2Fpsmp-activate-ansible-role/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyberark%2Fpsmp-activate-ansible-role/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cyberark","download_url":"https://codeload.github.com/cyberark/psmp-activate-ansible-role/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cyberark%2Fpsmp-activate-ansible-role/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260379965,"owners_count":23000181,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible-role","automation","conjbot-skip-stalepr","cyberark"],"created_at":"2024-11-13T02:16:47.399Z","updated_at":"2025-06-17T14:35:04.508Z","avatar_url":"https://github.com/cyberark.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PSMP-Activate Ansible Role\nThis Ansible Role will activate the CyberArk Privileged Session Manager PSM-SSH against an existing vault on an exisiting PSM-SSH machine that is not activated\nDo note that psmp-deploy can be ran prior to this role\n\n## Requirements\n------------\n\n- CentOS / RHEL installed on the remote host\n- SSH open on port 22\n- The workstation running the playbook must have network connectivity to the remote host\n- Administrator access to the remote host\n- PSM-SSH deployed on the remote machine\n\n\n### Flow Variables\nVariable                         | Required     | Default                                   | Comments\n:--------------------------------|:-------------|:------------------------------------------|:---------\npsmp_validate_machine            | no           | false                                     | Run the validate machine PSMP phase\npsmp_pre_activate                | no           | false                                     | Run the pre activate PSMP phase\npsmp_activate                    | no           | false                                     | Run the activation PSMP phase\npsmp_post_activate               | no           | false                                     | Run the post activation PSMP phase\npsmp_validate_activation         | no           | false                                     | Run the validate activation PSMP phase\npsmp_pre_deactivate              | no           | false                                     | Run the pre deactivate PSMP phase\npsmp_deactivate                  | no           | false                                     | Run the deactivate PSMP phase\npsmp_post_deactivate             | no           | false                                     | Run the post deactivate PSMP phase\n\n\n### Deployment Variables\nVariable                         | Required     | Default                                              | Comments\n:--------------------------------|:-------------|:-----------------------------------------------------|:---------\naccept_eula                      | yes          | **No**                                               | Accepting EULA condition (Yes/No)\nvault_ip                         | yes          | None                                                 | IP of the vault to register to\nvault_username                   | yes          | None                                                 | Vault username to be used for the registration, can be either credfile or username/password for the vault\nvault_password                   | yes          | None                                                 | Vault password to be used for the registration, can be either credfile or username/password for the vault\ncredfile_path                    | yes          | None                                                 | Vault credfile to be used for the registration, can be either credfile or username/password for the vault\ndr_vault_ip                      | no           | None                                                 | Disaster Recovery vault IP to use\nvault_name                       | no           | **PSM SSH Vault**                                    | Name of the vault\nvault_port                       | no           | **1858**                                             | Port of the vault\nvault_comm_timeout               | no           | **10**                                               | Timeout of PSMP communication to the vault\npsmp_create_psmp_env             | no           | **true**                                             | Whether to activate PSMP or not\npsmp_create_adbridge_env         | no           | **true**                                             | Whether to activate PSMP ADBridge or not\npsmp_app_user_name               | no           | **PSMPApp_\u003cHostname\u003e**                               | Name of the PSMP app user to use\npsmp_gw_user_name                | no           | **PSMPGW_\u003cHostname\u003e**                                | Name of the PSMP gateway user to use\npsmp_adb_user_name               | no           | **PSMP_ADB_\u003cHostname\u003e**                              | Name of the PSMP ADBridge user to use\npsmp_preauth_secured_session     | no           | **false**                                            | Whether to enable preauth secured session for LDAP / Radius connections\npsmp_selfsigned_certificates     | no           | **false**                                            | Whether to allow self signed certificate connections via the vault\npsmp_delete_credfile             | no           | **false**                                            | Whether to delete the cred file used for the activation, if password is used, the cred file will be deleted\npsmp_fetch_activation_logs       | no           | **true**                                             | Whether to fetch the activation logs back to the host, will be fetched to either current logs dir or DEFAULT_LOG_PATH env var\n\n## Dependencies\nPSMP Installed on the machine\n\n## Usage\nThe role consists of a number of different tasks which can be enabled or disabled for the particular\nrun.\n\n`psmp_validate_params`\n\nThis task will validate and init parameters for activation and will also check if PSMP is installed or not\n\n`psmp_validate_machine`\n\nThis task will validate that all the binaries and paths for the activation exists on the machine and whether PSMP was already activated or not\n\n`psmp_pre_activate`\n\nThis task will prepare the vault ini file for the activation and create the cred file if username and password were given\n\n`psmp_activate`\n\nThis task will run the activation for both PSMP and ADBridge\n\n`psmp_post_activate`\n\nThis task will run the post activation for both PSMP and ADBridge\n\n`psmp_validate_activation`\n\nThis task will validate that the activation was successful, and that PSMP / ADBridge are running properly\n\n`psmp_pre_deactivate`\n\nThis task will create the cred file for the deactivation if username and password were given\n\n`psmp_deactivate`\n\nThis task will perform the deactivation of the PSMP\n\n`psmp_post_deactivate`\n\nThis task will run the post deactivation for both PSMP and ADBridge\n\n\n## Example Playbook\nBelow is an example of how you can incorporate this role into an Ansible playbook\nto call the PSMP Activate role with several parameters:\n\n```\n---\n- include_role:\n    name: psmp-activate\n  vars:\n    - psmp_validate_machine: true\n    - psmp_pre_activate: true\n    - psmp_activate: true\n    - psmp_validate_activation: true\n    - vault_ip: \"\"\n    - vault_username: \"\"\n    - vault_password: \"\"\n    - psmp_enable_preauth_secured_session: true\n    - psmp_enable_selfsigned_certificates: true\n    - accept_eula: \"Yes\"\n```\n\n## Running the playbook:\nFor an example of how to incorporate this role into a complete playbook, please see the\n**[pas-orchestrator](https://github.com/cyberark/pas-orchestrator)** example.\n\n## License\nApache License, Version 2.0","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyberark%2Fpsmp-activate-ansible-role","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcyberark%2Fpsmp-activate-ansible-role","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyberark%2Fpsmp-activate-ansible-role/lists"}