Adding SSL certificates V2 Module - Release/2.4.0

[george-ghawali]

Summary

This PR introduces two new Ansible modules for managing SSL certificates on Nutanix clusters using Prism Central v4 APIs:

• ntnx_ssl_certificates_v2 - Update SSL certificates for specific clusters
• ntnx_ssl_certificates_info_v2 - Fetch SSL certificate information for specific clusters

New Modules

1. ntnx_ssl_certificates_v2

Purpose: Update SSL certificates for a specific cluster in Nutanix Prism Central

Key Features:

• Update SSL certificates for specific clusters using cluster external ID
• Support for multiple private key algorithms (ECDSA_256, RSA_2048, RSA_4096, etc.)
• Base64 format support for certificates and keys
• Support for CA chain, private keys, and passphrases
• Check mode support for spec generation

Parameters:

• ext_id (required) - Cluster external ID
• private_key_algorithm (required) - Private key algorithm (ECDSA_256, JKS, RSA_2048, ECDSA_521, KRB_KEYTAB, PKCS12, RSA_4096, RSA_PUBLIC, ECDSA_384)
• passphrase (optional) - Passphrase for encrypted private keys (no_log enabled)
• private_key (optional) - Private key in Base64 format (no_log enabled)
• public_certificate (optional) - Public certificate in Base64 format
• ca_chain (optional) - Certificate Authority chain in Base64 format

2. ntnx_ssl_certificates_info_v2

Purpose: Fetch detailed information about SSL certificates for a specific cluster

Key Features:

• Retrieve SSL certificate details for a specific cluster
• Returns complete certificate information including algorithm and public certificate

Parameters:

• ext_id (required) - Cluster external ID

Integration Tests

Comprehensive test coverage included in tests/integration/targets/ntnx_ssl_certificates_v2/tasks/ssl_certificates.yml:

Test Scenarios:

1. ✅ Fetch SSL certificates before updates
2. ✅ Generate spec using check mode
3. ✅ Update SSL certificates with valid parameters
4. ✅ Verify SSL certificates after update
5. ✅ Negative test: Update with invalid cluster external ID
6. ✅ Negative test: Update with invalid certificate parameters
7. ✅ Negative test: Fetch with invalid cluster external ID

Technical Details

• API Version: Prism Central v4 APIs
• SDK: ntnx_clustermgmt_py_client
• Module Version Added: 2.4.0
• Author: George Ghawali ( @george-ghawali )
• License: GNU General Public License v3.0+

Example Usage

Fetch SSL Certificate Information:

- name: Fetch SSL certificates info
  nutanix.ncp.ntnx_ssl_certificates_info_v2:
    nutanix_host: "{{ pc_ip }}"
    nutanix_username: "{{ username }}"
    nutanix_password: "{{ password }}"
    ext_id: "00061de6-4a87-6b06-185b-ac1f6b6f97e2"
  register: result

Update SSL Certificate:

- name: Update SSL certificate
  nutanix.ncp.ntnx_ssl_certificates_v2:
    nutanix_host: "{{ pc_ip }}"
    nutanix_username: "{{ username }}"
    nutanix_password: "{{ password }}"
    ext_id: "00061de6-4a87-6b06-185b-ac1f6b6f97e2"
    private_key_algorithm: "RSA_2048"
    passphrase: "{{ passphrase }}"
    private_key: "{{ private_key_base64 }}"
    public_certificate: "{{ public_cert_base64 }}"
    ca_chain: "{{ ca_chain_base64 }}"

[george-ghawali]

/ok-to-test ntnx_ssl_certificates_v2

Integration test run status is : failure
Coverage is : 50 %
Job link: https://github.com/nutanix/nutanix.ansible/actions/runs/19205013026

Detailed Test Results

### Summary:
- Total Tests: 1
- Passed: 1
- Failed: 0

### Passed Tests:
- ntnx_ssl_certificates_v2

### Failed Tests:
- None

Raw log file: test_output.log

[george-ghawali]

/ok-to-test ntnx_ssl_certificates_v2

Integration test run status is : failure
Coverage is : 50 %
Job link: https://github.com/nutanix/nutanix.ansible/actions/runs/19534126145

Detailed Test Results

### Summary:
- Total Tests: 1
- Passed: 1
- Failed: 0

### Passed Tests:
- ntnx_ssl_certificates_v2

### Failed Tests:
- None

Raw log file: test_output.log

[abhinavbansal29]

L.G.T.M.