ipa/client: enable for rabbitmq in prod

Signed-off-by: Nils Philippsen <nils@redhat.com>

inventory/group_vars/rabbitmq

@@ -32,9 +32,7 @@ custom_rules: [
     '-A INPUT -p tcp -m tcp -s 10.3.163.80 --dport 25672 -j ACCEPT',
 ]
 
-fas_client_groups: sysadmin-main,sysadmin-messaging
-sudoers: "{{ private }}/files/sudo/rabbitmq-sudoers"
-
+primary_auth_source: ipa
 ipa_host_group: rabbitmq
 ipa_host_group_desc: RabbitMQ service
 ipa_shell_groups:

playbooks/groups/rabbitmq.yml

@@ -18,8 +18,7 @@
   - rkhunter
   - nagios_client
   - hosts
-  - { role: fas_client, when: env != "staging" }
-  - { role: ipa/client, when: env == "staging" }
+  - ipa/client
   - collectd/base
   # RabbitMQ statistics are cluster-wide, only collect them on one member
   - role: collectd/rabbitmq
@@ -29,8 +28,6 @@
   - rabbitmq_cluster
 
   tasks:
-  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
-    when: env != "staging"
   - import_tasks: "{{ tasks_path }}/motd.yml"
 
   handlers: