Use Hashicorp Vault to generate TLS certificates
See hashicorp documentation for details
To configure PKI
ansible-playbook playbooks/pki.yml
To unconfigure
ansible-playbook playbooks/pki.yml --tags 'remove'
Note: Highly recommended to have deployed Vault + Consul cluster using the Ansible playbooks at this repository, or at least peruse for better understanding