feat: add insecure option to state and module

_modules/acme_sh.py

@@ -175,6 +175,7 @@ def issue(
     force=False,
     valid_to=None,
     valid_from=None,
+    insecure=False,
 ):
     """
     Obtain a certificate
@@ -236,6 +237,10 @@ def issue(
     valid_from
       NotBefore field in cert
       see https://github.com/acmesh-official/acme.sh/wiki/Validity
+
+    insecure
+      disable ssl verification
+      default: False
     """
 
     home_dir = __salt__["user.info"](user)["home"]
@@ -320,6 +325,10 @@ def issue(
     if valid_from:
         cmd.extend(["--valid-from", valid_from])
 
+    # insecure
+    if insecure:
+        cmd.append("--insecure")
+
     if acme_mode == "dns":
         log.debug("Set dns_credentials as temporary env")
         __salt__["environ.setenv"](dns_credentials)
@@ -443,7 +452,7 @@ def info(name, user="root", cert_path=None):
     return ret
 
 
-def renew(name, user="root", cert_path=None, force=False):
+def renew(name, user="root", cert_path=None, force=False, insecure=False):
     """
     Renew a certificate
 
@@ -461,6 +470,10 @@ def renew(name, user="root", cert_path=None, force=False):
     force
       force renewing a certificate
       default: False
+
+    insecure
+      disable ssl verification
+      default: False
     """
 
     home_dir = __salt__["user.info"](user)["home"]
@@ -477,6 +490,9 @@ def renew(name, user="root", cert_path=None, force=False):
     if force:
         cmd.append("--force")
 
+    if insecure:
+        cmd.append("--insecure")
+
     renew_cmd = __salt__["cmd.run_all"](" ".join(cmd), python_shell=False, runas=user)
 
     if renew_cmd["retcode"] == 0:

_states/acme_sh.py

@@ -131,6 +131,7 @@ def cert(
     force=False,
     valid_to=None,
     valid_from=None,
+    insecure=False,
 ):
     """
     Ensure that a certificate is issued
@@ -192,6 +193,10 @@ def cert(
     valid_from
       NotBefore field in cert
       see https://github.com/acmesh-official/acme.sh/wiki/Validity
+
+    insecure
+      Disable SSL certificate verification
+      default = False
     """
 
     ret = {
@@ -265,6 +270,7 @@ def cert(
             force=force,
             valid_to=valid_to,
             valid_from=valid_from,
+            insecure=insecure,
         )
 
         if __context__["retcode"] == 0:
@@ -290,6 +296,7 @@ def cert(
             user=user,
             cert_path=cert_path,
             force=force,
+            insecure=insecure,
         )
 
         if __context__["retcode"] == 0:

acme_sh/cert.sls

@@ -35,6 +35,9 @@ acme_sh_cert_{{ user }}_{{ domain }}:
       {%- if cert_config.get('valid_from') %}
     - valid_from: {{ cert_config['valid_from'] }}
       {%- endif %}
+      {%- if cert_config.get('insecure') %}
+    - insecure: {{ cert_config['insecure'] }}
+      {%- endif %}
     {%- endfor %}
   {%- endif %}
 {%- endfor %}