Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

venafi.machine_identity.policy always fails on autoinstalled #28

Open
peterjakobs opened this issue Aug 19, 2022 · 0 comments
Open

venafi.machine_identity.policy always fails on autoinstalled #28

peterjakobs opened this issue Aug 19, 2022 · 0 comments
Labels
bug Something isn't working

Comments

@peterjakobs
Copy link

PROBLEM SUMMARY
Trying to create a policy with role: venafi.machine_identity.policy but it always fails

STEPS TO REPRODUCE
AnsiblePlaybook:

  • hosts: localhost
    gather_facts: false
    vars_files:
    • inventory/DEV/group_vars/all
      roles:
    • role: venafi.machine_identity.policy
      policy_spec_path: "sample_policy_spec.json"

sample_policy_spec.json:
{
"policy": {
"domains": [ "" ],
"wildcardAllowed": true,
"autoInstalled": false,
"maxValidDays": 0,
"certificateAuthority": "",
"subject": {
"orgs": [ "" ],
"orgUnits": [ "" ],
"localities": [ "" ],
"states": [ "" ],
"countries": [ "EU" ]
},
"keyPair": {
"keyTypes": [ "RSA" ],
"rsaKeySizes": [ 2048 ],
"ellipticCurves": [ "P256" ],
"serviceGenerated": false,
"reuseAllowed": false
},
"subjectAltNames": {
"dnsAllowed": false,
"ipAllowed": false,
"emailAllowed": false,
"uriAllowed": false,
"upnAllowed": false
}
},
"defaults": {
"domain": "",
"subject": {
"org": "eu-LISA",
"orgUnits": [ "" ],
"locality": "",
"state": "",
"country": "EU"
},
"keyPair": {
"keyType": "",
"rsaKeySize": 0,
"ellipticCurve": "",
"serviceGenerated": false
}
}
}

EXPECTED RESULTS
Policy creation

ACTUAL RESULTS
TASK [venafi.machine_identity.policy : Create Policy on Venafi platform] **************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed to set policy at VED\Policy\Installed. Error: default value does not mach with policy value for [autoinstalled].\nDefault: None\nPolicy value: False"}

Changing "autoInstalled": "None",
TASK [venafi.machine_identity.policy : Create Policy on Venafi platform] **************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed to set policy at VED\Policy\Installed. Error: default value does not mach with policy value for [autoinstalled].\nDefault: None\nPolicy value: None"}

Changing: "autoInstalled": "False",
TASK [venafi.machine_identity.policy : Create Policy on Venafi platform] **************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed to set policy at VED\Policy\Installed. Error: default value does not mach with policy value for [autoinstalled].\nDefault: None\nPolicy value: False"}

ENVIRONMENT DETAILS
ansible-playbook [core 2.12.1]
python version = 3.10.0 (default, Dec 21 2021, 15:13:04) [Clang 13.0.0 (clang-1300.0.29.3)]
jinja version = 3.0.3
libyaml = True

python3.10 -m pip list
Package Version


ansible 5.1.0
ansible-core 2.12.1
ansible-lint 5.3.1
asn1crypto 1.5.1
bracex 2.2.1
certifi 2021.10.8
certvalidator 0.11.1
cffi 1.15.0
charset-normalizer 2.0.9
colorama 0.4.4
commonmark 0.9.1
cryptography 36.0.1
enrich 1.2.6
et-xmlfile 1.1.0
idna 3.3
Jinja2 3.0.3
jmespath 0.10.0
lxml 4.7.1
MarkupSafe 2.0.1
nsx-policy-python-sdk 3.1.3.2.0
nsx-python-sdk 3.1.3.2.0
nsx-vmc-aws-integration-python-sdk 3.1.3.2.0
nsx-vmc-policy-python-sdk 3.1.3.2.0
ntlm-auth 1.5.0
numpy 1.21.5
openpyxl 3.0.9
oscrypto 1.3.0
packaging 21.3
pandas 1.3.5
pip 21.3.1
pyasn1 0.4.8
pyasn1-modules 0.2.8
pycparser 2.21
Pygments 2.11.1
PyNaCl 1.5.0
pyOpenSSL 21.0.0
pyparsing 3.0.6
pypsrp 0.7.0
pyspnego 0.3.1
python-dateutil 2.8.2
python-ldap 3.4.2
python-tss-sdk 1.1.0
pytz 2021.3
pyvmomi 7.0.3
pywinrm 0.4.2
PyYAML 6.0
requests 2.27.1
requests-ntlm 1.1.0
resolvelib 0.5.4
rich 10.16.2
ruamel.yaml 0.17.20
ruamel.yaml.clib 0.2.6
setuptools 60.5.0
six 1.16.0
tenacity 8.0.1
urllib3 1.26.7
vapi-client-bindings 3.7.0
vapi-common-client 2.30.0
vapi-runtime 2.30.0
vcert 0.15.0
vmc-client-bindings 1.54.0
vmc-draas-client-bindings 1.18.0
vSphere-Automation-SDK 1.71.0
wcmatch 8.3
xmltodict 0.12.0

COMMENTS/WORKAROUNDS

@peterjakobs peterjakobs added the bug Something isn't working label Aug 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant