import internal ca

2024-12-18 08:57:26 +01:00
parent f77923544e
commit d442c6f01d
1 changed files with 12 additions and 0 deletions
--- a/roles/base/tasks/system_setup/import_stepca.yml
+++ b/roles/base/tasks/system_setup/import_stepca.yml
@@ -0,0 +1,12 @@
+- block:
+  - name: base | system setup | get step-ca certificate
+    get_url:
+      url: "https://step-ca.universe.local/roots.pem"
+      dest: "/etc/ca-certificates/trust-source/anchors/"
+
+  - name: base | system setup | import step-ca certificate
+    command:
+      cmd: "update-ca-trust"
+  become: yes
+  rescue:
+    - set_fact: task_failed=true