benschubert.infrastructure.authentik_certificate_info module – Allows retrieving information about certificates from the Authentik API

Note

This module is part of the benschubert.infrastructure collection (version 0.0.1).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install benschubert.infrastructure.

To use it in a playbook, specify: benschubert.infrastructure.authentik_certificate_info.

Synopsis

Parameters

Parameter

Comments

authentik_token

string / required

The token used to authenticate against the Authentik server

authentik_url

string / required

The URL at which to contact the Authentik server

ca_path

string

PEM formatted file that contains a CA certificate to be used for validation

name

string / required

The name of the certificate to retrieve

timeout

integer

The timeout to set when contacting the Authentik Server.

If your server is slow to respond, it might be necessary to bump this

Default: 10

validate_certs

boolean

If false, SSL certificates will not be validated.

This should only set to false used on personally controlled sites using self-signed certificates.

Choices:

  • false

  • true ← (default)

Examples

- name: Retrieve the default certificate from Authentik
  benschubert.infrastructure.authentik_certificate_info]:
    authentik_token: <my-secret-token>
    authentik_url: https://authentik.test/
    name: authentik Self-signed Certificate

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

data

dictionary

The information returned by the Authentik API for the certificate

Returned: always

Sample: {"cert_expiry": "2026-05-27T13:39:51Z", "cert_subject": "OU=Self-signed,O=authentik,CN=authentik Self-signed Certificate", "fingerprint_sha1": "fa:cc:39:b9:65:4f:0f:2f:8f:f6:34:d8:a0:3e:5d:ca:12:e0:05:b8", "fingerprint_sha256": "46:62:a1:65:56:12:91:ef:c2:31:9d:79:36:9f:ad:9c:20:bc:c1:ea:8e:6b:67:b2:0f:32:53:48:82:ff:77:66", "managed": null, "name": "authentik Self-signed Certificate", "pk": "964f1e77-a608-48d4-afd1-3fa4db05d90a", "private_key_available": true, "private_key_type": "rsa"}

msg

string

Information on what happen

Returned: always

Sample: "Found certificate"

Authors

  • Benjamin Schubert (@benjaminschubert)