In this step, configure the actions that occur after certificate issuance.
Post-Issuance Playbook
Upload a YAML Ansible playbook that executes on each target host after the certificate has been successfully issued. Common use cases include:
- Copying the issued certificate to the correct location on the host
If the bulk destination selected in Step 2 - Target does not set a Certificate Destination File Path, this playbook must handle certificate placement.
- Restarting web servers or application services to pick up the new certificate
- Updating configuration files with new certificate paths
- Notifying monitoring systems of the certificate deployment
See Downloading the installation files for instructions on downloading the Certificate Manager Ansible Sample Playbooks compressed file.
Mandatory: No.
Certificate PEM Output Variable
The name of the variable that contains the PEM-encoded certificate so that the post-issuance playbook can deploy it to the destination.
Mandatory: When the Bulk Destination selected in Step 2 - Target does not include a Certificate Destination File Path.
In that case, the playbook must handle certificate placement.
Post-Issuance Extra Variables
Additional variables for the post-issuance playbook, defined in YAML or JSON format. For example:
{ "service_name": "httpd", "restart_delay": 5}Mandatory: when the uploaded playbook references variables that are not defined within the playbook itself.