Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for oci_registry in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent b0eb4e6c82
commit 40a5fed45e
2 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
inventory/group_vars/oci_registry
View file

@ -1,6 +1,12 @@
---
fas_client_groups: sysadmin-releng
primary_auth_source: ipa
ipa_host_group: oci-registry
ipa_host_group_desc: OCI Registry service
ipa_client_shell_groups:
- sysadmin-releng
ipa_client_sudo_groups:
- sysadmin-releng
sudoers: "{{ private }}/files/sudo/00releng-sudoers"

5
playbooks/groups/oci-registry.yml
View file

@ -16,8 +16,7 @@
- rkhunter
- nagios_client
- hosts
- { role: fas_client, when: env != "staging" }
- { role: ipa/client, when: env == "staging" }
- ipa/client
- collectd/base
- rsyncd
- sudo
@ -40,8 +39,6 @@
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != "staging"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers: