Let's Encrypt with Ansible on Network Doodles

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 2.2:

Mon, 02 Nov 2026 00:00:00 +0000

Introduction

Continuing from Part 2.1, where we pushed certificates to a Cisco ASA, this post does the same thing for F5 BIG-IP. The certificates still come from the cert-store repository we built in Part 2, and the playbook still runs from AWX/AAP. What’s new is a playbook that uploads the certificate, key and chain to the F5 and builds (or updates) a client SSL profile for each one.

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 3:

Mon, 02 Nov 2026 00:00:00 +0000

Introduction

So far in this series we’ve built the pieces:

Part 1: request a certificate with Ansible Core and Cloudflare DNS-01
Part 2: run that from AWX/AAP and store the result in a cert-store Git repo
Part 2.1: deploy to a Cisco ASA
Part 2.2: deploy to an F5 BIG-IP

Every one of those still needs someone to click the rocket icon. This part removes the human. We’ll build an AWX/AAP workflow that runs every morning, checks every certificate, renews only the ones that are due, deploys them, verifies them, and only bothers you when something goes wrong.

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 4:

Mon, 02 Nov 2026 00:00:00 +0000

Introduction

In Part 3 we built a workflow that renews, deploys and verifies certificates on its own. Technically, we’re done. Then the change advisory board finds out that something is changing production firewalls and load balancers every few weeks with no change record, and suddenly we’re not done.

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 2.1:

Tue, 29 Oct 2024 00:00:00 +0000

Part 2.1: Deploying Let’s Encrypt Certificates to an ASA Using Ansible with AWX/AAP

Introduction

Continuing from Part 2 of our series, this tutorial will guide you through Let’s Encrypt certificates using AWX/Ansible Automation Platform to an ASA firewall. There will be a new playbook to apply the certificate to the ASA, but running the playbook will be the same as in Part 2 of our series. You will also have to make sure you have a few Prerequisites setup a head of time.

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 2:

Sun, 21 Jul 2024 00:00:00 +0000

Part 2: Managing Certificates with AWX/Ansible Automation Platform and GitOps

Introduction

Continuing from Part 1, this tutorial will guide you through managing Let’s Encrypt certificates using AWX/Ansible Automation Platform. We can use the exact same playbook from part 1 with a few modifications. You will also have to make sure you have a few Prerequisites setup a head of time.

Managing TLS Certificates Using Ansible and Let’s Encrypt! PART 1:

Sun, 23 Jun 2024 00:00:00 +0000

Part 1: Basics of Using Ansible Core to Request a Let’s Encrypt Certificate

Prerequisites

Ansible Core installed on your control node.
Ansible Vault enabled.
Cloudflare account with API token and DNS Zone ID for the zone your using to create the Certificate.