Forum Discussion

clint_simmons54's avatar
12 months ago

In purestorage.flashblade.purefb_certs, there is only

In purestorage.flashblade.purefb_certs, there is only a contents parameter for the cert file - is this expected to be a full-chain cert? It's a difference from purefa_certs in that there is a parameter for both the cert file and intermediate cert files. Unfortunately I don't have a test fb to run a test against at the moment, so looking for how that cert file should be structured.
  • bmcdougall's avatar
    bmcdougall
    Community Manager
    Hi Clint, I’ve spoken with our ansible experts and It appears that the FB certs module is using FB REST 1.x and needs to be upgraded to use REST 2.x which can then support intermediate certificates. This will go on the backlog. Unfortunately we don’t have an ETA currently for a resolution. Thank you for bringing this to our attention!
  • clint.simmons54 thanks for raising this. We have already developed a draft of the new module that will support intermediate certs, etc, just like the FlashArray. If you would like to try it out, you can grab it here: https://github.com/Pure-Storage-Ansible/FlashBlade-Collection/pull/279. If you try it out please let us know of any issues you find.