To report a problem or share an idea, use Issues; and if you have a suggestion for fixing the issue, please include those details, too. In addition, use Pull Requests to contribute actual bug fixes or proposed enhancements. We welcome and appreciate all contributions. Got questions or want to discuss something with our team? Join us on Slack!

Venafi Collection for Ansible

This collection, called machine_identity, uses Venafi Trust Protection Platform or Venafi as a Service to provide keys and certificates to Ansible solutions that require machine identity management.

If you like this collection, please give us a rating on Ansible Galaxy.

Requirements

Review the Venafi prerequisites, then install Ansible and VCert-Python (v0.11.2 or higher) using pip:

pip install ansible vcert --upgrade

Python version compatibility

This collection depends on vcert-python. Due to this, collection requires Python 3.6 or greater.

Venafi has also announced the end of support for Python less than 3.6. As such support for Python less than 3.6 by this collection has been deprecated.

Ansible version compatibility

This collection has been tested against the following Ansible versions: >= 2.13

Installing this collection

You can install the venafi.machine_identity collection with the Ansible Galaxy CLI:

ansible-galaxy collection install venafi.machine_identity

You can also include it in a requirements.yml file and install it with ansible-galaxy collection install -r requirements.yml, using the format:

---
collections:
  - name: venafi.machine_identity

A specific version of the collection can be installed by using the version keyword in the requirements.yml file:

---
collections:
  - name: venafi.machine_identity
    version: 0.10.0

The python module dependencies are not installed by ansible-galaxy. They can be manually installed using pip:

pip install -r requirements.txt

or:

pip install vcert ansible cryptography

Collection Contents

Roles

• venafi.machine_identity.certificate: Enrolls a certificate and optionally deploys it to a remote location.
• venafi.machine_identity.policy: Creates or updates certificate policy on VaaS or TPP using a specification file.
• venafi.machine_identity.ssh_certificate: Enrolls an SSH certificate using Trust Protection Platform.
• venafi.machine_identity.ssh_ca: Retrieves public keys of SSH certificate authorities hosted by TPP.

Version History

Check version history here

License

Copyright © Venafi, Inc. All rights reserved.

This solution is licensed under the Apache License, Version 2.0. See LICENSE for the full license text.

Please direct questions/comments to [email protected].