kevinveenbirkenbach c3c54ce043 refactor(tls): split resolution and certificate planning, add global self-signed SAN support ...

- Extract shared TLS logic into module_utils/tls_common
- Introduce cert_plan lookup for certificate paths and SAN computation
- Simplify tls_resolve to strict protocol/port/domain resolution only
- Add global self-signed certificate scope covering all domains
- Mount self-signed cert base into OpenResty container
- Update Nginx templates to use cert_plan for ssl_certificate paths
- Add comprehensive unit tests for tls_common, tls_resolve, and cert_plan

https://chatgpt.com/share/6972c568-9e8c-800f-b89a-a0061966f9a8

2026-01-23 01:48:31 +01:00

..

manager

feat(inventory): resolve shared providers transitively and support schema-less roles

2026-01-11 13:54:37 +01:00

__init__.py

Reorgenized test structure and added validation of inventory before deployment

2025-07-04 01:14:00 +02:00

test_cert_utils_newest.py

style: apply ruff autoformat

2025-12-17 16:37:21 +01:00

test_cert_utils.py

style: apply ruff autoformat

2025-12-17 16:37:21 +01:00

test_config_utils.py

style: apply ruff autoformat

2025-12-17 16:37:21 +01:00

test_role_dependency_resolver.py

style: apply ruff autoformat

2025-12-17 16:37:21 +01:00

test_role_resource_validation.py

ruff

2026-01-19 21:17:56 +01:00

test_tls_common.py

refactor(tls): split resolution and certificate planning, add global self-signed SAN support

2026-01-23 01:48:31 +01:00