Skip to content

Commit f76974c

Browse files
adn1107adn1107
committed
adding test playbooks back
Signed-off-by: Andrew Nguyen <[email protected]>
1 parent b90958d commit f76974c

File tree

2 files changed

+132
-0
lines changed

2 files changed

+132
-0
lines changed

‎ibm_concert/cert_renewal/create_USER_cert.yml

Lines changed: 82 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,82 @@
1+
###############################################################################
2+
# © Copyright IBM Corporation 2024
3+
###############################################################################
4+
5+
- hosts: all
6+
collections:
7+
- ibm.ibm_zos_core
8+
gather_facts: false
9+
environment: "{{ environment_vars }}"
10+
vars:
11+
owner_id: 'STCUSR'
12+
cert_label: 'concertCertificateTest'
13+
sign_label: 'IBM CA'
14+
cn: 'share.centers.ihost.com:19999'
15+
altname: 'IP(192.148.8.225)'
16+
ou: 'Concert for Z'
17+
country: 'US'
18+
expiry_date: '2024-11-08'
19+
expiry_time: '10:06:00' # UTC time
20+
keyring: 'Keyring.CONCERT'
21+
check_name: 'IBMRACF,RACF_CERTIFICATE_EXPIRATION'
22+
23+
tasks:
24+
- block:
25+
- name: Clean up certs and keyring
26+
ibm.ibm_zos_core.zos_tso_command:
27+
commands:
28+
- RACDCERT ADDRING({{keyring}}) ID({{owner_id}})
29+
- RACDCERT LISTRING({{keyring}}) ID({{ owner_id}})
30+
register: tso_cmd_output
31+
ignore_errors: true
32+
33+
- name: Create new self-signed USER cert and connect to keyring
34+
ibm.ibm_zos_core.zos_tso_command:
35+
commands:
36+
- RACDCERT GENCERT ID({{owner_id}}) SUBJECTSDN(CN('{{cn}}') OU('{{ou}}') C('{{country}}')) WITHLABEL('{{cert_label}}') NOTAFTER(DATE({{expiry_date}}) TIME({{expiry_time}}) ) ALTNAME({{altname}})
37+
- RACDCERT ID({{owner_id}}) CONNECT(LABEL('{{cert_label}}') RING({{keyring}}) DEFAULT)
38+
- RACDCERT LISTRING({{keyring}}) ID({{owner_id}})
39+
- RACDCERT ID({{owner_id}}) ALTER(LABEL('{{cert_label}}')) TRUST
40+
- RACDCERT LISTCHAIN(LABEL('{{cert_label}}')) ID({{owner_id}})
41+
when: sign_label == ' ' and not expiry_date == ''
42+
register: tso_cmd_output
43+
44+
- name: Create new local-CA-signed USER cert and connect to keyring
45+
ibm.ibm_zos_core.zos_tso_command:
46+
commands:
47+
- RACDCERT GENCERT ID({{owner_id}}) SUBJECTSDN(CN('{{cn}}') OU('{{ou}}') C('{{country}}')) WITHLABEL('{{cert_label}}') SIGNWITH(CERTAUTH LABEL('{{sign_label}}')) NOTAFTER(DATE({{expiry_date}}) TIME({{expiry_time}}) ) ALTNAME({{altname}})
48+
- RACDCERT ID({{owner_id}}) CONNECT(LABEL('{{cert_label}}') RING({{keyring}}) DEFAULT)
49+
- RACDCERT LISTRING({{keyring}}) ID({{owner_id}})
50+
- RACDCERT ID({{owner_id}}) ALTER(LABEL('{{cert_label}}')) TRUST
51+
- RACDCERT LISTCHAIN(LABEL('{{cert_label}}')) ID({{owner_id}})
52+
when: not sign_label == ' ' and not expiry_date == ''
53+
register: tso_cmd_output
54+
55+
- name: Create new self-signed USER cert and connect to keyring
56+
ibm.ibm_zos_core.zos_tso_command:
57+
commands:
58+
- RACDCERT GENCERT ID({{owner_id}}) SUBJECTSDN(CN('{{cn}}') OU('{{ou}}') C('{{country}}')) WITHLABEL('{{cert_label}}') ALTNAME({{altname}})
59+
- RACDCERT ID({{owner_id}}) CONNECT(LABEL('{{cert_label}}') RING({{keyring}}) DEFAULT)
60+
- RACDCERT LISTRING({{keyring}}) ID({{owner_id}})
61+
- RACDCERT ID({{owner_id}}) ALTER(LABEL('{{cert_label}}')) TRUST
62+
- RACDCERT LISTCHAIN(LABEL('{{cert_label}}')) ID({{owner_id}})
63+
when: sign_label == ' ' and expiry_date == ''
64+
register: tso_cmd_output
65+
66+
- name: Create new local-CA-signed USER cert and connect to keyring
67+
ibm.ibm_zos_core.zos_tso_command:
68+
commands:
69+
- RACDCERT GENCERT ID({{owner_id}}) SUBJECTSDN(CN('{{cn}}') OU('{{ou}}') C('{{country}}')) WITHLABEL('{{cert_label}}') SIGNWITH(CERTAUTH LABEL('{{sign_label}}')) ALTNAME({{altname}})
70+
- RACDCERT ID({{owner_id}}) CONNECT(LABEL('{{cert_label}}') RING({{keyring}}) DEFAULT)
71+
- RACDCERT LISTRING({{keyring}}) ID({{owner_id}})
72+
- RACDCERT ID({{owner_id}}) ALTER(LABEL('{{cert_label}}')) TRUST
73+
- RACDCERT LISTCHAIN (LABEL('{{cert_label}}')) ID({{owner_id}})
74+
when: not sign_label == ' ' and expiry_date == ''
75+
register: tso_cmd_output
76+
77+
- name: List keyring
78+
ibm.ibm_zos_core.zos_tso_command:
79+
commands:
80+
- RACDCERT LISTRING({{keyring}}) ID({{ owner_id}})
81+
ignore_errors: true
82+
register: tso_cmd_output

‎ibm_concert/cert_renewal/delete_cert.yml

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
###############################################################################
2+
# © Copyright IBM Corporation 2024
3+
###############################################################################
4+
5+
- hosts: all
6+
collections:
7+
- ibm.ibm_zos_core
8+
gather_facts: false
9+
environment: "{{ environment_vars }}"
10+
vars:
11+
owner_id: 'STCUSR'
12+
cert_type: 'USER'
13+
cert_label: 'concertCertificateTest'
14+
keyring: 'Keyring.CONCERT'
15+
16+
check_name: 'IBMRACF,RACF_CERTIFICATE_EXPIRATION'
17+
18+
tasks:
19+
- name: Deleting cert {{cert_label}}
20+
ibm.ibm_zos_core.zos_tso_command:
21+
commands:
22+
- RACDCERT ID({{ owner_id}}) DELETE(LABEL('{{cert_label}}'))
23+
when: cert_type == 'USER'
24+
register: tso_cmd_output
25+
26+
- name: Deleting cert {{cert_label}}
27+
ibm.ibm_zos_core.zos_tso_command:
28+
commands:
29+
- RACDCERT CERTAUTH DELETE(LABEL('{{cert_label}}'))
30+
when: cert_type == 'CERTAUTH'
31+
register: tso_cmd_output
32+
33+
- name: Deleting cert {{cert_label}}
34+
ibm.ibm_zos_core.zos_tso_command:
35+
commands:
36+
- RACDCERT SITE DELETE(LABEL('{{cert_label}}'))
37+
when: cert_type == 'SITE'
38+
register: tso_cmd_output
39+
40+
- name: Issue setropts refresh
41+
tags: refresh
42+
ibm.ibm_zos_core.zos_tso_command:
43+
commands: SETROPTS RACLIST(DIGTCERT) REFRESH
44+
45+
- name: Display keyring
46+
ibm.ibm_zos_core.zos_tso_command:
47+
commands:
48+
- RACDCERT LISTRING({{keyring}}) ID({{ owner_id}})
49+
ignore_errors: true
50+
register: tso_cmd_output

0 commit comments

Comments
 (0)