community.network.avi_pkiprofile module – Module for setup of PKIProfile Avi RESTful Object

Note

This module is part of the community.network collection (version 5.1.0).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install community.network. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: community.network.avi_pkiprofile.

Note

The community.network collection has been deprecated and will be removed from Ansible 12. See the discussion thread for more information.

DEPRECATED

Removed in:

version 6.0.0

Why:

This collection and all content in it is unmaintained and deprecated.

Alternative:

Unknown.

Synopsis

Aliases: network.avi.avi_pkiprofile

Requirements

The below requirements are needed on the host that executes this module.

  • avisdk

Parameters

Parameter

Comments

api_context

dictionary

Avi API context that includes current session ID and CSRF Token.

This allows user to perform single login and re-use the session.

api_version

string

Avi API version of to use for Avi API and objects.

Default: "16.4.4"

avi_api_patch_op

string

Patch operation to use when using avi_api_update_method as patch.

Choices:

  • "add"

  • "replace"

  • "delete"

avi_api_update_method

string

Default method for object update is HTTP PUT.

Setting to patch will override that behavior to use HTTP PATCH.

Choices:

  • "put" ← (default)

  • "patch"

avi_credentials

dictionary

Avi Credentials dictionary which can be used in lieu of enumerating Avi Controller login details.

api_version

string

Avi controller version

Default: "16.4.4"

controller

string

Avi controller IP or SQDN

csrftoken

string

Avi controller API csrftoken to reuse existing session with session id

Default: ""

password

string

Avi controller password

port

string

Avi controller port

session_id

string

Avi controller API session id to reuse existing session with csrftoken

Default: ""

tenant

string

Avi controller tenant

Default: "admin"

tenant_uuid

string

Avi controller tenant UUID

Default: ""

timeout

string

Avi controller request timeout

Default: 300

token

string

Avi controller API token

Default: ""

username

string

Avi controller username

avi_disable_session_cache_as_fact

boolean

It disables avi session information to be cached as a fact.

Choices:

  • false ← (default)

  • true

ca_certs

string

List of certificate authorities (root and intermediate) trusted that is used for certificate validation.

controller

string

IP address or hostname of the controller. The default value is the environment variable AVI_CONTROLLER.

created_by

string

Creator name.

crl_check

boolean

When enabled, avi will verify via crl checks that certificates in the trust chain have not been revoked.

Default value when not specified in API or module is interpreted by Avi Controller as True.

Choices:

  • false

  • true

crls

string

Certificate revocation lists.

ignore_peer_chain

boolean

When enabled, avi will not trust intermediate and root certs presented by a client.

Instead, only the chain certs configured in the certificate authority section will be used to verify trust of the client’s cert.

Default value when not specified in API or module is interpreted by Avi Controller as False.

Choices:

  • false

  • true

is_federated

boolean

This field describes the object’s replication scope.

If the field is set to false, then the object is visible within the controller-cluster and its associated service-engines.

If the field is set to true, then the object is replicated across the federation.

Field introduced in 17.1.3.

Default value when not specified in API or module is interpreted by Avi Controller as False.

Choices:

  • false

  • true

name

string / required

Name of the pki profile.

password

string

Password of Avi user in Avi controller. The default value is the environment variable AVI_PASSWORD.

state

string

The state that should be applied on the entity.

Choices:

  • "absent"

  • "present" ← (default)

tenant

string

Name of tenant used for all Avi API calls and context of object.

Default: "admin"

tenant_ref

string

It is a reference to an object of type tenant.

tenant_uuid

string

UUID of tenant used for all Avi API calls and context of object.

Default: ""

url

string

Avi controller URL of the object.

username

string

Username used for accessing Avi controller. The default value is the environment variable AVI_USERNAME.

uuid

string

Unique object identifier of the object.

validate_only_leaf_crl

boolean

When enabled, avi will only validate the revocation status of the leaf certificate using crl.

To enable validation for the entire chain, disable this option and provide all the relevant crls.

Default value when not specified in API or module is interpreted by Avi Controller as True.

Choices:

  • false

  • true

Notes

Note

Examples

- name: Example to create PKIProfile object
  community.network.avi_pkiprofile:
    controller: 10.10.25.42
    username: admin
    password: something
    state: present
    name: sample_pkiprofile

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

obj

dictionary

PKIProfile (api/pkiprofile) object

Returned: success, changed

Status

  • This module will be removed in version 6.0.0. [deprecated]

  • For more information see DEPRECATED.

Authors

  • Gaurav Rastogi (@grastogi23)