Ansible: Install ssl certificate on admin vserver

[Boreus]

Hello,

we're trying to deploy and install a CA-signed ssl certificate on the admin vserver to get HTTPS when connecting to the cluster webgui.

With the netapp.ontap.na_ontap_security_certificates module we have successfully deployed the certificate on the cluster, but it will not be used by the vserver.

We somehow need to execute this command.

security ssl modify -vserver [VSERVER] -serial [SERIAL] -ca [CA]

Is this possible without using the na_ontap_ssh_command module?

https://docs.ansible.com/ansible/latest/collections/netapp/ontap/na_ontap_security_certificates_module.html#ansible-collections-netapp-ontap-na-ontap-...

[DarrenJ]

This might be useful. 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_install_a_Certificate_Authority_(CA)_signed_certificate_in_ONTA...

Are you trying to find a way to install it without getting into the CLI at all? 

[Boreus]

Hey,

yes we would like to completely change the ceritificate via ansible.

[DarrenJ · Accepted solution]

Understood. You will likely need the na_ontap_ssh_command module as you mentioned, as I'm not aware of any other way to install it. 

Others might have a better suggestion though.

[CAPATEL_NET1984]

would like to see the code if possible.. i am using cli commands in ansible but useful to see how you coded the whole workflow using modules.