Let's Encrypt with Ansible
Automate the whole TLS certificate lifecycle: request with Ansible Core, run it from AWX/AAP with GitOps, deploy to Cisco ASA and F5 BIG-IP, renew on a schedule, and close the loop with ServiceNow change records.
Certificates are the most boring outage you’ll ever have, and with lifetimes shrinking toward 47 days, doing them by hand is no longer an option. This series builds a certificate pipeline one piece at a time. Each part works on its own, and each one builds on the last.
- 1
Request a certificate with Ansible Core
This tutorial will guide you through the basics of using Ansible Core to request a Let's Encrypt certificate, securely storing your Cloudflare API key and DNS Zone ID … - 2
Run it from AWX / AAP with GitOps
This tutorial will guide you through using Ansible AWX/AAP to request a Let's Encrypt certificate and securely storing your Cloudflare API key. This is the Second part of … - 2.1
Deploy to Cisco ASA
In this post, we’ll demonstrate how to automate the deployment of Let's Encrypt certificates to Cisco ASA firewalls using Ansible, specifically within an AWX/AAP (Ansible … - 2.2
Deploy to F5 BIG-IP
Deploy Let's Encrypt certificates from your cert-store repo to F5 BIG-IP with Ansible and AWX/AAP: custom credentials, versioned cert and key objects, client SSL … - 3
Scheduled auto-renewal workflows
Turn the request, deploy and verify playbooks from Parts 1 through 2.2 into a scheduled AWX/AAP workflow that checks every certificate daily, renews only what's due, … - 4
ServiceNow change and catalog integration
Close the loop with ServiceNow: the AAP renewal workflow opens and closes its own standard change, raises an incident when verification fails, and new certificates can be …