https://github.com/openstack/ansible-role-lunasa-hsm

Ansible role to manage Luna SA Hardware Security Module (HSM) client software. Mirror of code maintained at opendev.org.
https://github.com/openstack/ansible-role-lunasa-hsm

Last synced: about 1 year ago
JSON representation

Ansible role to manage Luna SA Hardware Security Module (HSM) client software. Mirror of code maintained at opendev.org.

• Host: GitHub
• URL: https://github.com/openstack/ansible-role-lunasa-hsm
• Owner: openstack
• License: apache-2.0
• Created: 2020-05-27T12:38:47.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2024-09-17T08:45:56.000Z (almost 2 years ago)
• Last Synced: 2024-09-17T11:17:13.611Z (almost 2 years ago)
• Language: Python
• Homepage: https://opendev.org/openstack/ansible-role-lunasa-hsm
• Size: 40 KB
• Stars: 3
• Watchers: 8
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.rst
  • License: LICENSE
  • Authors: AUTHORS

Awesome Lists containing this project

README

          
lunasa-hsm

==========

A role to manage Thales Luna Network Hardware Security Module (HSM) clients.

Role Variables

--------------

This ansible role automates the configuration of a new client for the

Thales Luna Network HSM.

.. list-table::

   :widths: auto

   :header-rows: 1

   * - Name

     - Default Value

     - Description

   * - lunasa_client_working_dir

     - /tmp/lunasa_client_install

     - Working directory in the target host.

   * - lunasa_client_tarball_name

     - None

     - Filename for the Lunasa client software tarball.

   * - lunasa_client_tarball_location

     - None

     - Full URL where a copy of the client software tarball can be downloaded.

   * - lunasa_client_installer_path

     - None

     - Path to the instal.sh script inside the tarball.

   * - lunasa_client_pin

     - None

     - The HSM Partition Password (PKCS#11 PIN) to be used by the client.

   * - lunasa_client_ip

     - None

     - (Optional) When set, this role will use the given IP to register

       the client instead of the client's fqdn.

   * - lunasa_client_rotate_cert

     - False

     - When set to True, the role will generate a new client certificate

       to replace the previous one.

   * - lunasa_hsms

     - None

     - List of dictionaries, each of which describes a single HSM

       `see vars.sample.yaml` for details.  When more than one HSM is

       listed here, the client will be configured in HA mode.

Requirements

------------

 - ansible >= 2.4