Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

iad2: also switch base keytab to use python3 now (so new hosts in iad2 only)

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-06-03 11:19:57 -07:00
parent 3acd61b067
commit ee3f1f523e
1 changed files with 0 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/base/tasks/keytab.yml
View file

@ -9,8 +9,6 @@
- krb5
- name: Get admin keytab
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
shell: echo "{{ipa_admin_password}}" | kinit admin
tags:
@ -20,8 +18,6 @@
when: not host_keytab_status.stat.exists
- name: Create host entry
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: ipa host-add {{inventory_hostname}}
register: host_add_result
@ -34,8 +30,6 @@
when: not host_keytab_status.stat.exists
- name: Create additional host entries
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: ipa host-add {{item}}
with_items: "{{ additional_host_keytabs }}"
@ -49,8 +43,6 @@
when: not host_keytab_status.stat.exists
- name: Generate host keytab
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: ipa-getkeytab -s {{ipa_server}} -p host/{{inventory_hostname}} -k /tmp/{{inventory_hostname}}.kt
register: getkeytab_result
@ -63,8 +55,6 @@
when: not host_keytab_status.stat.exists
- name: Add additional host keytabs
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: ipa-getkeytab -s {{ipa_server}} -p host/{{item}} -k /tmp/{{inventory_hostname}}.kt
with_items: "{{ additional_host_keytabs }}"
@ -78,8 +68,6 @@
when: not host_keytab_status.stat.exists
- name: Destroy kerberos ticket
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: kdestroy -A
tags:
@ -89,8 +77,6 @@
when: not host_keytab_status.stat.exists
- name: Get keytab
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
command: base64 /tmp/{{inventory_hostname}}.kt
register: keytab
@ -101,8 +87,6 @@
when: not host_keytab_status.stat.exists
- name: Destroy stored keytab
vars:
ansible_python_interpreter: /usr/bin/python2
delegate_to: "{{ ipa_server }}"
file: path=/tmp/{{inventory_hostname}}.kt state=absent
tags: