thalesgroup.ciphertrust.cckm_az_vault (1.0.0) — module

CCKM module for Azure Key Vault

| "added in version" 1.0.0 of thalesgroup.ciphertrust"

Authors: Anurag Jain, Developer Advocate Thales Group

Install collection

Install with ansible-galaxy collection install thalesgroup.ciphertrust:==1.0.0


Add to requirements.yml

  collections:
    - name: thalesgroup.ciphertrust
      version: 1.0.0

Description

This is a Thales CipherTrust Manager module for working with the CipherTrust Manager APIs, more specifically with CCKM for Azure Vault

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: "Create Azure Vault"
  thalesgroup.ciphertrust.cckm_az_vault:
    localNode:
        server_ip: "IP/FQDN of CipherTrust Manager"
        server_private_ip: "Private IP in case that is different from above"
        server_port: 5432
        user: "CipherTrust Manager Username"
        password: "CipherTrust Manager Password"
        verify: false
    op_type: create

Inputs

    
acls:
    description: acls
    type: list

vaults:
    description: Azure vault parameters.
    type: list

op_type:
    choices:
    - create
    - update
    - vault_op
    - update-acls
    description: Operation to be performed
    required: true
    type: str

vault_id:
    description: Azure Key Vault to be acted upon
    type: str

localNode:
    description:
    - this holds the connection parameters required to communicate with an instance of
      CipherTrust Manager (CM)
    - holds IP/FQDN of the server, username, password, and port
    required: true
    suboptions:
      password:
        description: admin password of CM
        required: true
        type: str
      server_ip:
        description: CM Server IP or FQDN
        required: true
        type: str
      server_port:
        default: 5432
        description: Port on which CM server is listening
        required: true
        type: int
      server_private_ip:
        description: internal or private IP of the CM Server, if different from the server_ip
        required: true
        type: str
      user:
        description: admin username of CM
        required: true
        type: str
      verify:
        default: false
        description: if SSL verification is required
        required: true
        type: bool
    type: dict

connection:
    description: Name or ID of the connection. Connection name must be associated with
      the key vault to which it belongs.
    type: str

job_config_id:
    description: Id of the scheduler job that will perform key rotation.
    type: str

vault_op_type:
    choices:
    - enable-rotation-job
    - disable-rotation-job
    - update-acls
    - remove-vault
    description: Operation that can be performed on an Azure Vault
    type: str

subscription_id:
    description: Subscription ID of the vault.
    type: str

override_key_scheduler:
    description: Whether to use key scheduler or vault scheduler if both exist.
    type: bool