Sys-svc-compose-ca Role

Description: Helper role installing CA-trust injection assets for Docker Compose stacks and validating the project CA certificate

Variables

  • author: Kevin Veen-Birkenbach

  • description: Helper role installing CA-trust injection assets for Docker Compose stacks and validating the project CA certificate

  • license: Infinito.Nexus Community License (Non-Commercial)

  • company: Kevin Veen-Birkenbach https://www.veen.world

  • galaxy_tags: [‘docker’, ‘compose’, ‘tls’, ‘ca’, ‘certificates’]

  • issue_tracker_url: https://s.infinito.nexus/issues

  • min_ansible_version: 2.9

  • platforms: [{‘name’: ‘ArchLinux’, ‘versions’: [‘all’]}, {‘name’: ‘Debian’, ‘versions’: [‘all’]}, {‘name’: ‘EL’, ‘versions’: [‘all’]}, {‘name’: ‘Fedora’, ‘versions’: [‘all’]}, {‘name’: ‘Ubuntu’, ‘versions’: [‘all’]}]

README

sys-svc-compose-ca

Description

Internal helper role that installs CA-trust injection assets used by Docker Compose stacks. It ships a small wrapper plus the inject script and validates that the project CA certificate is present on the host before container builds rely on it.

Overview

This role installs CA trust injection assets for compose (wrapper + inject script) and validates CA cert presence.

Cosmos

The diagram places sys-svc-compose-ca in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).

flowchart LR
    subgraph role [sys-svc-compose-ca 💻]
        svc_svc_compose_ca["svc-compose-ca"]
    end

Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments); red 0..0 edges are turned off in this role. Node markers show the role’s deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.

Features

  • Automated provisioning: Configured by Ansible without manual steps.

Credits

Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).