chore(certs): Create an Ansible playbook for generating certificate signing requests

docs-devel/deployment/index.md

@@ -42,3 +42,7 @@ Once deployed the services are available at:
 | Lakekeeper UI | <https://analytics.isis.cclrc.ac.uk/iceberg/ui> |
 | Superset (accelerator) | <https://analytics.isis.cclrc.ac.uk/workspace/accelerator> |
 | Superset (experiment_ops) | <https://analytics.isis.cclrc.ac.uk/workspace/experiment_ops> |
+
+## Certificates
+
+See [certificates](certificates.md) for details on certificate management.

docs-devel/readme.md

@@ -16,7 +16,6 @@ the future.
 
 ```text
 .
-├── certs/                  # Certificate request configurations used for HTTPS/SSL
 ├── docs/                   # User-facing documentation site (MkDocs). See docs/src for content.
 ├── docs-devel/             # Developer documentation (this directory).
 ├── elt-common/             # Reusable Python package with common ELT helpers used by the warehouses

infra/ansible/.gitignore

@@ -4,3 +4,4 @@ condaenv/
 galaxy_roles
 *.ini
 inventory.yml
+*.csr

infra/ansible/site_csr.yml

@@ -0,0 +1,14 @@
+---
+- name: Generate certificate signing request
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Generate an OpenSSL Certificate Signing Request
+      community.crypto.openssl_csr:
+        path: "{{ csr_out_path }}"
+        privatekey_content: "{{ vault_tls_key }}"
+        country_name: GB
+        state_or_province_name: Wiltshire
+        organization_name: UK Research and Innovation
+        organizational_unit_name: STFC
+        common_name: "{{ top_level_domain }}"