Commit Graph
10 Commits
Author SHA1 Message Date
volker.raschekandCopilot 41d06e4e6d feat!: apply subject alternative names to root and intermediate CA
The variables `certificate_authority_root_ca_subject_alternative_names` and
`certificate_authority_intermediate_ca_subject_alternative_names` were
documented but never referenced by any task, so both CA certificates were always
issued without SANs. Wire them into the corresponding CSR tasks and fall back to
`omit` when the list is empty.

SAN entries are now passed to `openssl_csr` unchanged instead of being prefixed
with `DNS:` by the role. This allows other types such as `IP:` or `email:`,
which the previous rewrite would have corrupted into values like `DNS:IP:...`.
The client tasks additionally dropped `join(',') | quote`, because `quote`
performs shell escaping and `openssl_csr` expects a list.

Since both client CSR tasks only differed in `subject_alt_name`, they collapse
into a single task per file.

BREAKING CHANGE: Entries of all `*_subject_alternative_names` variables must now
carry their type prefix, for example `DNS:example.local` instead of
`example.local`.

Co-authored-by: Copilot <copilot@github.com>
2026-09-07 22:28:52 +02:00
volker.raschek aca86c74ab docs(meta): add argument_specs
Lint Markdown files / markdown-lint (push) Successful in 5s
Ansible Linter / ansible-lint (push) Successful in 1m4s
Release Ansible Role / Release Ansible Role (push) Successful in 58s
2026-01-14 21:53:45 +01:00
volker.raschek 972c43c8fa fix: rename files to .yaml
Ansible Linter / ansible-lint (push) Successful in 21s
Lint Markdown files / markdown-lint (push) Successful in 5s
2025-11-23 16:14:35 +01:00
volker.raschek 594325b852 fix(ansible-galaxy): adapt indentation
Ansible Linter / ansible-lint (push) Successful in 43s
Lint Markdown files / markdown-lint (push) Successful in 11s
2025-08-06 16:10:23 +02:00
volker.raschek f3e818b07c fix(ansible-galaxy): add namespace
Ansible Linter / ansible-lint (push) Failing after 42s
Lint Markdown files / markdown-lint (push) Successful in 11s
2025-08-06 15:22:26 +02:00
volker.raschek 29c166acda fix(ansible-galaxy): adapt list of supported platforms
Lint Markdown files / markdown-lint (push) Successful in 11s
Ansible Linter / ansible-lint (push) Failing after 37s
2025-08-06 11:44:49 +02:00
volker.raschek a14c799290 fix(ansible-galaxy): remove namespace
Lint Markdown files / markdown-lint (push) Successful in 10s
Ansible Linter / ansible-lint (push) Failing after 31s
2025-08-06 11:39:09 +02:00
volker.raschek 6208d55dcb fix(linter): be compliant with ansible-linter
Lint Markdown files / markdown-lint (push) Successful in 10s
Ansible Linter / ansible-lint (push) Successful in 33s
2025-08-06 10:55:42 +02:00
volker.raschek ac6f54d360 fix(galaxy): change namespace from volker-raschek to volker_raschek
Lint Markdown files / markdown-lint (push) Successful in 10s
Ansible Linter / ansible-lint (push) Failing after 45s
2025-08-06 10:53:30 +02:00
volker.raschek a0ea59c528 Initial Commit
Lint Markdown files / markdown-lint (push) Successful in 11s
Ansible Linter / ansible-lint (push) Failing after 49s
2025-07-30 22:09:38 +02:00