cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

added skip_ssl argument for VMware module to skip SSL verification (required when using self signed certificates)

Browse source
This commit is contained in:
Kamil Szczygiel 2016-01-27 20:41:28 +01:00
parent 6bf2f45ff5
commit a381c1bbd6
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
lib/ansible/module_utils/vmware.py
View file

@ -21,6 +21,7 @@
try: try:
import atexit import atexit
import time import time
import ssl
# requests is required for exception handling of the ConnectionError # requests is required for exception handling of the ConnectionError
import requests import requests
from pyVim import connect from pyVim import connect
@ -104,6 +105,7 @@ def vmware_argument_spec():
hostname=dict(type='str', required=True), hostname=dict(type='str', required=True),
username=dict(type='str', aliases=['user', 'admin'], required=True), username=dict(type='str', aliases=['user', 'admin'], required=True),
password=dict(type='str', aliases=['pass', 'pwd'], required=True, no_log=True), password=dict(type='str', aliases=['pass', 'pwd'], required=True, no_log=True),
skip_ssl=dict(type='bool', required=False, default=False),
) )
@ -112,8 +114,15 @@ def connect_to_api(module, disconnect_atexit=True):
hostname = module.params['hostname'] hostname = module.params['hostname']
username = module.params['username'] username = module.params['username']
password = module.params['password'] password = module.params['password']
skip_ssl = module.params['skip_ssl']
try: try:
service_instance = connect.SmartConnect(host=hostname, user=username, pwd=password) if skip_ssl:
context = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
context.verify_mode = ssl.CERT_NONE
service_instance = connect.SmartConnect(host=hostname, user=username, pwd=password, sslContext=context)
else:
service_instance = connect.SmartConnect(host=hostname, user=username, pwd=password)
# Disabling atexit should be used in special cases only. # Disabling atexit should be used in special cases only.
# Such as IP change of the ESXi host which removes the connection anyway. # Such as IP change of the ESXi host which removes the connection anyway.