Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for basset in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 191ab62299
commit 445a15d612
2 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/basset
View file

@ -19,4 +19,4 @@ custom_rules: [
'-A INPUT -p tcp -m tcp -s 10.5.126.167 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.5.126.167 --dport 80 -j ACCEPT',
] ]
fas_client_groups: sysadmin-main primary_auth_source: ipa

4
playbooks/groups/basset.yml
View file

@ -17,8 +17,7 @@
- rkhunter - rkhunter
- nagios_client - nagios_client
- hosts - hosts
- { role: ipa/client, when: env == "staging" } - ipa/client
- { role: fas_client, when: env != "staging" }
- collectd/base - collectd/base
- rsyncd - rsyncd
- sudo - sudo
@ -34,7 +33,6 @@
- import_tasks: "{{ tasks_path }}/yumrepos.yml" - import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks: tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
- import_tasks: "{{ tasks_path }}/motd.yml" - import_tasks: "{{ tasks_path }}/motd.yml"
handlers: handlers: