c9f757de68
Setuptools v54.1.0 introduces a warning that the use of dash-separated options in 'setup.cfg' will not be supported in a future version [1]. Get ahead of the issue by replacing the dashes with underscores. Without this, we see 'UserWarning' messages like the following on new enough versions of setuptools: UserWarning: Usage of dash-separated 'description-file' will not be supported in future versions. Please use the underscore name 'description_file' instead [1] https://github.com/pypa/setuptools/commit/a2e9ae4cb Change-Id: I1a0ce7526a0f6c84ace786a80f5344fc5d626f0d
atos-hsm
A role to manage ATOS Hardware Security Module (HSM) client software.
Role Variables
| Name | Default Value | Description |
|---|---|---|
| atos_client_working_dir | /tmp/atos_client_install | Working directory in the target host. |
| atos_client_iso_name | None | Filename for the ATOS Client Software ISO. |
| atos_client_iso_location | None | Full URL where a copy of ATOS Client ISO can be downloaded. |
| atos_client_cert_location | None | Full URL where the client certificate can be downloaded. |
| atos_client_key_location | None | Full URL where the client key can be downloaded. |
| atos_hsms | None | List of one or more HSM devices. |
Requirements
- ansible >= 2.4
Usage
You'll need to set up a temporary HTTP server somewhere that is accessible to the node where this role will be applied. The HTTP server should serve the following:
- ATOS Client Software ISO file.
- HSM Server Certificate file(s).
- HSM Client Certificate file.
- HSM Client Key file associated with the Client Certificate.
Due to the sensitive nature of the Certificate and Key files, you should use TLS encryption and username and passwords to access the HTTP server.
Use the hostname and user/password for your HTTP server for the full URL values that need to be set for this role. See vars.yaml.example.