feat(agent): Allow disabling certificate generation via var (#29)

radiorabe · Nov 18, 2024 · 764d020 · 764d020
1 parent c3e7c2a
commit 764d020
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/roles/agent/README.md b/roles/agent/README.md
@@ -14,6 +14,7 @@ Opinionated Zabbix agent installation
 | `radiorabe_zabbix_agent_server` | `monitoring.service.int.rabe.ch` |
 | `radiorabe_zabbix_agent_serveractive` | `monitoring.service.int.rabe.ch` |
 | `radiorabe_zabbix_agent_extra_allow_key` | `[]`, the role add some defaults that are sane for our case |
+| `radiorabe_zabbix_agent_generate_cert` | `true` |
 
 ### Other Variables
 

diff --git a/roles/agent/defaults/main.yml b/roles/agent/defaults/main.yml
@@ -1,6 +1,7 @@
 radiorabe_zabbix_agent_server: monitoring.service.int.rabe.ch
 radiorabe_zabbix_agent_serveractive: monitoring.service.int.rabe.ch
 radiorabe_zabbix_agent_extra_allow_key: []
+radiorabe_zabbix_agent_generate_cert: true
 
 _radiorabe_zabbix_agent_package_name: zabbix-agent2
 _radiorabe_zabbix_agent_package_state: present

diff --git a/roles/agent/tasks/main.yaml b/roles/agent/tasks/main.yaml
@@ -24,6 +24,7 @@
         principal: "zabbix/{{ foreman.foreman_fqdn }}@{{ radiorabe_core_int_hostname | upper }}"
   ansible.builtin.include_role:
     name: "{{ _radiorabe_zabbix_agent_certificate_rolename }}"
+  when: radiorabe_zabbix_agent_generate_cert
   tags:
     - role::rabe_zabbix.agent
     - role::rabe_zabbix.agent.certificates