Deploy FAS config for prod IPA
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
parent
2cb844e02b
commit
7b19073b0d
2 changed files with 23 additions and 4 deletions
23
roles/fas_server/files/ipa.production.pem
Normal file
23
roles/fas_server/files/ipa.production.pem
Normal file
|
@ -0,0 +1,23 @@
|
||||||
|
-----BEGIN CERTIFICATE-----
|
||||||
|
MIIDpDCCAoygAwIBAgIBATANBgkqhkiG9w0BAQsFADA8MRowGAYDVQQKDBFGRURP
|
||||||
|
UkFQUk9KRUNULk9SRzEeMBwGA1UEAwwVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4X
|
||||||
|
DTE2MTAxMzEzMDQ0NloXDTM2MTAxMzEzMDQ0NlowPDEaMBgGA1UECgwRRkVET1JB
|
||||||
|
UFJPSkVDVC5PUkcxHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTCCASIw
|
||||||
|
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLFCPrsPD3YW/yzvId7UsWCq/Ac
|
||||||
|
cD7IOtlt46slTa490TvfpwzB1IwA3H0LTEYV7LONMIxJIT8H4H2P7A/S4eDtA6sZ
|
||||||
|
s26Qp+3YLj+jHOwvNiONG5YBIn6vgUKc1SdwyuQsNwcGsH1nV2vXrKYz4ccMud1P
|
||||||
|
tzzwRMSWgwZLXcLvMMXYpDCxu4pVmgEtTnYz7Dii7MJ2aJsWEuslzjL6HjaegfGD
|
||||||
|
JjXCrqmNKcgbgD7fQq05wiYw8AbArjhfObDO626b4naB0VxLb9vGTDBaRbIeL7Or
|
||||||
|
nM11BWVqYAFFRZPL1jXkeb9Bpr9oj4PduRq6+tSZPa3wgtnoowAN2AqLHKMCAwEA
|
||||||
|
AaOBsDCBrTAfBgNVHSMEGDAWgBQVrijBhrLB6xwkwjZroAlWJGIpvDAPBgNVHRMB
|
||||||
|
Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQUFa4owYaywescJMI2
|
||||||
|
a6AJViRiKbwwSgYIKwYBBQUHAQEEPjA8MDoGCCsGAQUFBzABhi5odHRwOi8vaXBh
|
||||||
|
MDEucGh4Mi5mZWRvcmFwcm9qZWN0Lm9yZzo4MC9jYS9vY3NwMA0GCSqGSIb3DQEB
|
||||||
|
CwUAA4IBAQAZE5ZVf2MROtRR2O00ecXwl3vBE72xw87EQdAQ6J9sDjug5YrVW6OU
|
||||||
|
OfaRoVLyBSi5uPgj2RZ9VePdGNSDZ66DhspPtmbWcW0M1X2QPXwWQ/Idj3MfKE33
|
||||||
|
b+V4A6T55p1kxXniNl0KZHlDVMECltwRBkd9mjr3LgWzk/EgqyiP56xrWEsvKUyv
|
||||||
|
ZMvoyFky2/BaNTN8KOposjDQZwR5sqE/CJzm/QJPg/6zQ4/tkFDOc7ZqIVkfIqoY
|
||||||
|
sycNYLLakqCV59xuJ2uDbV8Sn8LbH5+e3Px0mapnVxn8fJAPcCqDOmXJ5TVkVYlH
|
||||||
|
nYYOskqEw5stHYuEwujR2uXo8vfmIMpZ
|
||||||
|
-----END CERTIFICATE-----
|
||||||
|
|
|
@ -17,7 +17,6 @@
|
||||||
- fas
|
- fas
|
||||||
|
|
||||||
- name: install needed packages
|
- name: install needed packages
|
||||||
when: env == "staging"
|
|
||||||
yum: pkg={{ item }} state=installed
|
yum: pkg={{ item }} state=installed
|
||||||
with_items:
|
with_items:
|
||||||
- krb5-workstation
|
- krb5-workstation
|
||||||
|
@ -27,14 +26,12 @@
|
||||||
- fas
|
- fas
|
||||||
|
|
||||||
- name: configure krb5
|
- name: configure krb5
|
||||||
when: env == "staging"
|
|
||||||
template: src=krb5.conf.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
template: src=krb5.conf.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- fas
|
- fas
|
||||||
|
|
||||||
- name: install IPA keytab
|
- name: install IPA keytab
|
||||||
when: env == "staging"
|
|
||||||
copy: >
|
copy: >
|
||||||
src="{{ private }}/files/keytabs/{{env}}/fas_sync"
|
src="{{ private }}/files/keytabs/{{env}}/fas_sync"
|
||||||
dest="/etc/fas_sync_keytab"
|
dest="/etc/fas_sync_keytab"
|
||||||
|
@ -46,7 +43,6 @@
|
||||||
- fas
|
- fas
|
||||||
|
|
||||||
- name: install ipa public cert
|
- name: install ipa public cert
|
||||||
when: env == "staging"
|
|
||||||
copy: src=ipa.{{env}}.pem dest=/etc/fas_sync_cert.pem owner=root group=root mode=0644
|
copy: src=ipa.{{env}}.pem dest=/etc/fas_sync_cert.pem owner=root group=root mode=0644
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue