From bee623abd27a68de18fa6bf259405a8f82e84d94 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Wed, 5 May 2021 15:05:32 -0700
Subject: [PATCH] bastion: move ipa/client before openvpn-server as it needs
 sysadmin-main group now

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 playbooks/groups/bastion.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/playbooks/groups/bastion.yml b/playbooks/groups/bastion.yml
index 091375f876..c2be1a81e7 100644
--- a/playbooks/groups/bastion.yml
+++ b/playbooks/groups/bastion.yml
@@ -13,10 +13,10 @@
   roles:
   - base
   - rkhunter
+  - ipa/client
   - openvpn/server
   - nagios_client
   - hosts
-  - ipa/client
   - sudo
   - collectd/base
   - packager_alias