add a flag for enabling/disabling certificate deployment (#17)

ltb-project · Dec 3, 2024 · 99aaf0d · 99aaf0d
1 parent 9f71665
commit 99aaf0d
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 0 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -3,6 +3,9 @@
 # Defaults variables for OpenLDAP role
 ################################################################################
 
+# Deploy certificate
+ldaptoolbox_openldap_deploy_certificates: false
+
 
 # apt package repository
 ldaptoolbox_openldap_apt_key_url: "https://ltb-project.org/documentation/_static/RPM-GPG-KEY-LTB-project"

diff --git a/playbook/multimaster.yml b/playbook/multimaster.yml
@@ -13,6 +13,8 @@
     # include extra schema
     - ldaptoolbox_openldap_custom_schema_srcdir: "{{ playbook_dir }}/files/ldaptoolbox.oldap/usr/local/openldap/etc/openldap/schema"
     - ldaptoolbox_openldap_custom_schema_list: [ custom.ldif ]
+    # Deploy certificates
+    - ldaptoolbox_openldap_deploy_certificates: true
     - ldaptoolbox_openldap_olcTLSCACertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/ca.crt' }}"
     - ldaptoolbox_openldap_olcTLSCertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.crt' }}"
     - ldaptoolbox_openldap_olcTLSCertificateKeyFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.key' }}"

diff --git a/playbook/standalone.yml b/playbook/standalone.yml
@@ -14,6 +14,7 @@
     - ldaptoolbox_openldap_custom_schema_srcdir: "{{ playbook_dir }}/files/ldaptoolbox.oldap/usr/local/openldap/etc/openldap/schema"
     - ldaptoolbox_openldap_custom_schema_list: [ custom.ldif ]
     # deploy certificates
+    - ldaptoolbox_openldap_deploy_certificates: true
     - ldaptoolbox_openldap_olcTLSCACertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/ca.crt' }}"
     - ldaptoolbox_openldap_olcTLSCertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.crt' }}"
     - ldaptoolbox_openldap_olcTLSCertificateKeyFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.key' }}"

diff --git a/tasks/main.yml b/tasks/main.yml
@@ -21,6 +21,7 @@
 
 - name: setup certificates
   include_tasks: ldaptoolbox-certificates.yml
+  when: ldaptoolbox_openldap_deploy_certificates|bool == true
 
 # Configuration
 # -------------