22.4. 使用 Ansible 为 IdM 用户、主机和服务检索 SSL 证书

流程

1. 使用以下内容创建 Ansible playbook 文件 retrieve-certificate.yml ：

   ---
   - name: Playbook to retrieve a certificate and store it locally on the managed node
     hosts: ipaserver
   
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
   
     tasks:
     - name: Retrieve a certificate and save it to file 'cert.pem'
       ipacert:
         ipaadmin_password: "{{ ipaadmin_password }}"
         serial_number: 123456789
         certificate_out: cert.pem
         state: retrieved

   Copy to Clipboard Toggle word wrap

2. 检索证书：

   $ ansible-playbook --vault-password-file=password_file -v -i <path_to_inventory_directory>/hosts <path_to_playbooks_directory>/retrieve-certificate.yml

   Copy to Clipboard Toggle word wrap