maxhoesel-ansible/ansible-collection-smallstep

Support remote provisioner management

maxhoesel opened this issue · 0 comments

Newer step versions support remote provisioner management using the admin parameters. This allows CA administrators to add and remove provisioners without needing direct access to the configuration. We should make this feature accessible to users of this collection, both in the modules and in the managed roles.

To support this feature, we need to do the following:

  • Add admin parameters to step_ca_provisioner module (Done in #142)
  • Add option to enable remote provisioning in step_ca role
  • Write tests for remote provisioner management
  • (Optional) Add a module for the step ca admin command to manage admin permissions
  • (Optional) Add parameters to step_ca that allow configuring admin users and permissions