Commit Graph

26 Commits

Author SHA1 Message Date
Kevin Fenzi
07837f83a7 sigul / server: modernize playbook
This had a bunch of old rhel7 stuff in it, we are on 9 now and using
gnupg2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-20 11:29:39 -07:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Patrick Uiterwijk
8f78142cb3 Uncomment yubico-piv-tool for now
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-09 18:59:48 +02:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:10 +02:00
Karsten Hopp
c9ed62ac32 update ansible_distribution_major_version conditionals
Signed-off-by: Karsten Hopp <karsten@redhat.com>
2020-04-24 21:34:10 +02:00
Patrick Uiterwijk
e9f0047575 Also sync out the keys for vault 05 and 06
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-11-09 23:44:06 +01:00
Patrick Uiterwijk
490d1785ea Use the new package for pkcs11 in openssl
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-11-09 23:20:22 +01:00
Kevin Fenzi
4fea617129 need name here 2018-11-09 21:09:50 +00:00
Kevin Fenzi
6b20d863a3 some last sign vault fixes 2017-03-03 20:09:53 +00:00
Patrick Uiterwijk
90628ec565 Add public yubikey stuff
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-19 21:04:57 +00:00
Kevin Fenzi
4b297e330d this is a copy, not a file 2016-10-19 19:17:26 +00:00
Kevin Fenzi
b704d6b898 Add polkit rules to allow sigul user to access smartcard/yubikey for autosign binding. 2016-09-24 17:54:28 +00:00
Patrick Uiterwijk
46ced0ed73 Add yubikey tooling
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-23 11:41:45 +00:00
Kevin Fenzi
4b60d56915 link gpg1 only on rhel 2016-09-21 20:54:47 +00:00
Kevin Fenzi
c3502f1463 and install gnupg on fedora 2016-09-21 20:53:04 +00:00
Kevin Fenzi
d2b4b8ca30 this is just p11kit 2016-09-21 20:51:04 +00:00
Kevin Fenzi
cdba42510f gnupg1 only exists in our rhel7 repo 2016-09-21 20:48:30 +00:00
Kevin Fenzi
93351f9b5d this needs to be package to work on both fedora and rhel 2016-09-21 20:44:45 +00:00
Patrick Uiterwijk
a0b92a81b0 For yubikeys, we will also need engine_pkcs11
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-16 20:04:40 +00:00
Patrick Uiterwijk
c9d150a4db Add rhel7ah to sigul server
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-13 16:44:29 +00:00
Patrick Uiterwijk
08b2be4a61 Make roles out of sigul, and update configs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-12 23:18:17 +00:00