ipa/client: enable for vmhost_copr in prod

Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 65e0ea5d96
commit a706cd8459
2 changed files with 9 additions and 6 deletions

View file

@ -1,8 +1,14 @@
---
virthost: true
fas_client_groups: sysadmin-copr,sysadmin-main
sudoers: "{{ private }}/files/sudo/copr-sudoers"
primary_auth_source: ipa
ipa_host_group: vmhost-copr
ipa_host_group_desc: VM hosts for COPR
ipa_client_shell_groups:
- sysadmin-copr
ipa_client_sudo_groups:
- sysadmin-copr
nrpe_procs_warn: 1400
nrpe_procs_crit: 1500

View file

@ -24,16 +24,13 @@
- rkhunter
- nagios_client
- hosts
- { role: ipa/client, when: env == "staging" }
- { role: fas_client, when: env != "staging" }
- ipa/client
- collectd/base
- sudo
- { role: openvpn/client, when: vpn|bool }
- virthost
tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != 'staging'
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers: