updated playbook for ste-ca

tasks/main.yml

@@ -1,52 +1,31 @@
 ---
-- name: set package-names for armv7l
+- name: show ansible_architecture
+  ansible.builtin.debug:
+    var: ansible_architecture
+
+- name: set package-names for aarch64
   set_fact:
-    step: step_linux_0.15.16_armv7.tar.gz
+    step: https://github.com/smallstep/cli/releases/download/v0.24.2-rc.6/step-cli_0.24.2-rc.6_arm64.deb
-    stepca: step-ca_linux_0.15.15_armv7.tar.gz
+    stepca: https://github.com/smallstep/certificates/releases/download/v0.24.3-rc.2/step-ca_0.24.3-rc.2_arm64.deb
-  when: 'ansible_architecture == "armv7l"'
+  when: 'ansible_architecture == "aarch64"'
 
 - name: set package-names for amd64
   set_fact:
-    step: step_linux_0.15.16_amd64.tar.gz
+    step: https://github.com/smallstep/certificates/releases/download/v0.24.3-rc.2/step-ca_0.24.3-rc.2_amd64.deb
-    stepca: step-ca_linux_0.15.15_amd64.tar.gz
+    stepca: https://github.com/smallstep/certificates/releases/download/v0.24.3-rc.2/step-ca_0.24.3-rc.2_amd64.deb
   when: ansible_architecture == "amd64"
 
 - name: stop when facts not set to download Packages
   meta: end_play
   when: step is not defined or stepca is not defined
 
-- name: Download Packages
+- name: Install step-cli
-  get_url:
+  apt:
-    url: "{{ item }}"
+    deb: "{{ step }}"
-    dest: /opt/ansiblepackages
-    owner: root
-    group: root
-    mode: '0440'
-  with_items:
-    - "https://github.com/smallstep/certificates/releases/download/v0.15.15/{{ stepca }}"
-    - "https://github.com/smallstep/cli/releases/download/v0.15.16/{{ step }}"
 
-- name: extract Packages
+- name: Install step-ca
-  unarchive:
+  apt:
-    src: "/opt/ansiblepackages/{{ item }}"
+    deb: "{{ stepca }}"
-    dest: /opt/ansiblepackages
-    remote_src: yes
-  with_items:
-    - "{{ step }}"
-    - "{{ stepca }}"
-
-- name: copy binaries
-  copy:
-    src: "{{ item.src }}"
-    dest: "{{ item.dst }}"
-    owner: root
-    group: root
-    mode: '0755'
-    backup: no
-    remote_src: yes
-  with_items:
-    - { src: "/opt/ansiblepackages/step_0.15.16/bin/step", dst: "/usr/bin/step" }
-    - { src: "/opt/ansiblepackages/step-ca_0.15.15/bin/step-ca", dst: "/usr/bin/step-ca" }
 
 - name: create user for step-ca
   user:
@@ -66,7 +45,7 @@
     mode: "0770"
 
 - name: init step-ca
-  command: sudo -u step step ca init -ssh --name="{{ pki_name }}" --dns {{ ansible_hostname }} --issuer="{{ pki_name }}" --address=:4343 --provisioner="{{ pki_name }}" --password-file=/etc/step-ca/password.txt --provisioner-password-file=/etc/step-ca/password.txt
+  command: sudo -u step step ca init --name="{{ pki_name }}" --dns {{ ansible_hostname }} --issuer="{{ pki_name }}" --address=:4343 --provisioner="{{ pki_name }}" --password-file=/etc/step-ca/password.txt --provisioner-password-file=/etc/step-ca/password.txt
   args:
     creates: /etc/step-ca/.step/config
 
@@ -88,23 +67,23 @@
   notify:
     - reload systemd
 
-- name: correct ca.json step 1
+#- name: correct ca.json step 1
-  lineinfile:
+#  lineinfile:
-    path: /etc/step-ca/.step/config/ca.json
+#    path: /etc/step-ca/.step/config/ca.json
-    line: "{{'\t'}}{{'\t'}}\"type\": \"badgerV2\","
+#    line: "{{'\t'}}{{'\t'}}\"type\": \"badgerV2\","
-    state: present
+#    state: present
-    regexp: "^{{'\t'}}{{'\t'}}\"type\": \"badger"
+#    regexp: "^{{'\t'}}{{'\t'}}\"type\": \"badger"
-  notify:
+#  notify:
-    - restart step-ca
+#    - restart step-ca
 
-- name: correct ca.json step 2
+#- name: correct ca.json step 2
-  lineinfile:
+#  lineinfile:
-    path: /etc/step-ca/.step/config/ca.json
+#    path: /etc/step-ca/.step/config/ca.json
-    line: "{{'\t'}}{{'\t'}}\"badgerFileLoadingMode\": \"FileIO\""
+#    line: "{{'\t'}}{{'\t'}}\"badgerFileLoadingMode\": \"FileIO\""
-    state: present
+#    state: present
-    regexp: "^{{'\t'}}{{'\t'}}\"badgerFileLoadingMode\":"
+#    regexp: "^{{'\t'}}{{'\t'}}\"badgerFileLoadingMode\":"
-  notify:
+#  notify:
-    - restart step-ca
+#    - restart step-ca
 
 - name: Flush handlers
   meta: flush_handlers
@@ -145,7 +124,7 @@
   register: jwkabsent
 
 - name: remove jwk provisioner
-  command: sudo -u step step ca provisioner remove "{{ pki_name }}" --type JWK
+  command: sudo -u step step ca provisioner remove "{{ pki_name }}"
   when: jwkabsent is changed
   notify:
     - restart step-ca