Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for packages in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent bc6c2d4edd
commit bd01967b92
2 changed files with 2 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
inventory/group_vars/packages
View file

@ -15,10 +15,7 @@ tcp_ports: [ 80, 443,
# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran,sysadmin-packages
sudoers: "{{ private }}/files/sudo/sysadmin-packages"
primary_auth_source: ipa
ipa_host_group: packages
ipa_client_shell_groups:
- sysadmin-noc

4
playbooks/groups/packages.yml
View file

@ -23,8 +23,7 @@
- rkhunter
- nagios_client
- hosts
- { role: ipa/client, when: env == "staging" }
- { role: fas_client, when: env != "staging" }
- ipa/client
- collectd/base
- rsyncd
- sudo
@ -33,7 +32,6 @@
- mod_wsgi
tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers: