stdevel / ansible-collection-landscape Goto Github PK

Unless a CA is used, it would be handy to simply import the Landscape server's public key as landscape-config unfortunately misses this parameter 🤡 🤡 🤡

Idea:

- name: Store Landscape certificate
  ansible.builtin.shell: |
    set -o pipefail
    openssl s_client -showcerts -servername HOSTNAME -servername HOSTNAME -connect HOSTNAME:443 <<< "Q" | openssl x509 -pubcert -out /etc/landscape/landscape_server.crt
  args:
    executable: /bin/bash
    creates: /etc/landscape/landscape_server.crt

Currently, the role won't re-execute the register task even if there was an issue (e.g. incorrect SSL certificate). I guess, the creates parameter is incorrect.

It might be a idea to check for the System successfully registered output.

According to the official documentation we could also configure certificates and mail.