From 72b940d31a9b3c912d4779d287db1e71e6f130da Mon Sep 17 00:00:00 2001
From: Nils Philippsen <nils@redhat.com>
Date: Wed, 24 Mar 2021 23:47:04 +0100
Subject: [PATCH] ipa/client: stopgap for shell groups on bastion

Evaluating ipa_client_shell_group from another group won't work this
way. Hardcode the list until we have a better solution.

Signed-off-by: Nils Philippsen <nils@redhat.com>
---
 inventory/group_vars/bastion | 37 +++++++++++++++++++++++++++++++++++-
 1 file changed, 36 insertions(+), 1 deletion(-)

diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
index 2f15aed9f2..ab91074aec 100644
--- a/inventory/group_vars/bastion
+++ b/inventory/group_vars/bastion
@@ -26,7 +26,42 @@ ipa_host_group: bastion
 ipa_host_group_desc: Bastion hosts
 
 # this assumes the `batcave` group exists with at least one host in it
-batcave_ipa_client_shell_groups: "{{ hostvars[groups['batcave'][0]]['ipa_client_shell_groups'] | default([]) }}"
+#batcave_ipa_client_shell_groups: "{{ hostvars[groups['batcave'][0]]['ipa_client_shell_groups'] | default([]) }}"
+
+# Stopgap because the above doesn't work, needs to be in sync with what's actually set for the
+# batcave group.
+batcave_ipa_client_shell_groups:
+- fi-apprentice
+- sysadmin-ask
+- sysadmin-atomic
+- sysadmin-badges
+- sysadmin-bot
+- sysadmin-centos
+- sysadmin-cloud
+- sysadmin-copr
+- sysadmin-coreos
+- sysadmin-cvs
+- sysadmin-datanommer
+- sysadmin-debuginfod
+- sysadmin-fedimg
+- sysadmin-fpdc
+- sysadmin-gnome
+- sysadmin-hosted
+- sysadmin-koschei
+- sysadmin-libravatar
+- sysadmin-mbs
+- sysadmin-messaging
+- sysadmin-noc
+- sysadmin-odcs
+- sysadmin-osbs
+- sysadmin-qa
+- sysadmin-releasemonitoring
+- sysadmin-releng
+- sysadmin-tools
+- sysadmin-upstreamfirst
+- sysadmin-veteran
+- sysadmin-web
+
 bastion_ipa_client_shell_groups:
 - pungi-devel
 - sysadmin-analysis