Add ansible certificates role

This role is used to generate and install certificates on instances,
incl. root ca.
Those certificates are used mainly to allow secure access to
internal docker registry with proper certificate verification.

Issue-ID: OOM-1551
Change-Id: I74782dd2938cb51da293f88483d5362981269196
Signed-off-by: Michal Zegan <m.zegan@samsung.com>

1 files changed, 9 insertions, 0 deletions

diff --git a/ansible/roles/certificates/templates/v3.ext.j2 b/ansible/roles/certificates/templates/v3.ext.j2
new file mode 100644
index 00000000..7be946fd
--- /dev/null
+++ b/ansible/roles/certificates/templates/v3.ext.j2
@@ -0,0 +1,9 @@
+authorityKeyIdentifier=keyid,issuer
+basicConstraints=CA:FALSE
+keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
+subjectAltName = @alt_names
+
+[alt_names]
+{% for name in all_simulated_hosts -%}
+    DNS.{{ loop.index }} = {{ name }}
+{% endfor %}