Hello,
we're trying to deploy and install a CA-signed ssl certificate on the admin vserver to get HTTPS when connecting to the cluster webgui.
With the netapp.ontap.na_ontap_security_certificates module we have successfully deployed the certificate on the cluster, but it will not be used by the vserver.
We somehow need to execute this command.
security ssl modify -vserver [VSERVER] -serial [SERIAL] -ca [CA]
Is this possible without using the na_ontap_ssh_command module?
https://docs.ansible.com/ansible/latest/collections/netapp/ontap/na_ontap_security_certificates_module.html#ansible-collections-netapp-ontap-na-ontap-security-certificates-module
Understood. You will likely need the na_ontap_ssh_command module as you mentioned, as I'm not aware of any other way to install it.
Others might have a better suggestion though.
This might be useful.
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_install_a_Certificate_Authority_(CA)_signed_certificate_in_ONTAP_for_System_Manager_use
Are you trying to find a way to install it without getting into the CLI at all?
Hey,
yes we would like to completely change the ceritificate via ansible.
would like to see the code if possible.. i am using cli commands in ansible but useful to see how you coded the whole workflow using modules.
Is there still no other way?
I like to renew all certificates with acme.
Therefor I have to get all certs which are used for ssl.
Here is missing an subset in the ontap_rest_info and a seperate module for ssl itself to modify the used certificates.
Will there come something, because na_ontap_ssh_comand does not come back with "security ssl show".
