Added keystore and truststore management playbooks.
diff --git a/apigee-tls-lb-terminating.yml b/apigee-tls-lb-terminating.yml
deleted file mode 100644
index 257d636..0000000
--- a/apigee-tls-lb-terminating.yml
+++ /dev/null
@@ -1,75 +0,0 @@
----
-- name: Update cache for target servers
- hosts: ms,rmp
- tags: ['cache']
- vars_files:
- - ~/.apigee/custom-properties.yml
- roles:
- - { role: apigee-opdk-setup-default-settings }
-
-- name: Configure Management Server for TLS
- hosts: ms
- become: yes
- become_user: apigee
- tags: ['ms']
- vars_files:
- - ~/.apigee-secure/credentials.yml
- vars:
- cwc_properties:
- - { key: 'conf_virtualhost_virtual.host.properties.names', value: 'proxy_read_timeout,keepalive_timeout,ssl_ciphers,ssl_protocols,proxy_request_buffering,proxy_buffering,listen', file_name: 'management-server' }
- roles:
- - { role: apigee-opdk-cwc-update, tags: ['update'] }
- - { role: apigee-opdk-stop-components, tags: ['restart','ms-restart'] }
- - { role: apigee-opdk-start-components, tags: ['restart','ms-restart'] }
-
-- name: Configure Each Router for TLS
- hosts: rmp
- become: yes
- become_user: apigee
- tags: ['router']
- vars_files:
- - ~/.apigee-secure/credentials.yml
- vars:
- cwc_properties:
- - { key: 'conf_virtualhost_virtual.host.properties.names', value: 'proxy_read_timeout,keepalive_timeout,ssl_ciphers,ssl_protocols,proxy_request_buffering,proxy_buffering,listen', file_name: 'management-server' }
- roles:
- - { role: apigee-opdk-cwc-update, tags: ['update'] }
- - { role: apigee-opdk-stop-components, tags: ['restart','r-restart'] }
- - { role: apigee-opdk-start-components, tags: ['restart','r-restart'] }
-
-- name: Update VHOST Configuration
- hosts: ms
- tags: ['vhost']
- vars_files:
- - ~/.apigee-secure/credentials.yml
- vars:
- keystore: testKeystore
- clientAuthEnabled: False
- sslinfo_enabled: true
-
- tasks:
-# - name: Upload Keystore
-
- - name: Update VHOST Configuration
- uri:
- url: "http://{{ local_mgmt_ip }}:8080/v1/organizations/{{ org_name }}/environments/{{ env_name }}/virtualhosts/{{ virtual_host_name }}"
- method: POST
- user: "{{ opdk_user_email }}"
- password: "{{ opdk_user_pass }}"
- force_basic_auth: yes
- headers:
- Content-Type: "application/xml"
- body: |
- <VirtualHost name='{{ virtual_host_name }}'>
- <HostAliases>
- <HostAlias>{{ virtual_host_alias }}</HostAlias>
- </HostAliases>
- <Interfaces/>
- <Port>{{ virtual_host_port }}</Port>
- <SSLInfo>
- <Enabled>{{ sslinfo_enabled }}</Enabled>
- <ClientAuthEnabled>{{ clientAuthEnabled }}</ClientAuthEnabled>
- <KeyStore>{{ keystore }}</KeyStore>
- <KeyAlias>{{ virtual_host_alias }}</KeyAlias>
- </SSLInfo>
- </VirtualHost>
