infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

ipa/client: enable for ipa in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 07dcdf1024
commit 006b2246b1
2 changed files with 2 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

3
inventory/group_vars/ipa
View file

@ -10,8 +10,7 @@ custom_rules: [
'-A INPUT -p udp -m udp -s 10.5.0.0/16 --dport 53 -j ACCEPT' '-A INPUT -p udp -m udp -s 10.5.0.0/16 --dport 53 -j ACCEPT'
] ]
fas_client_groups: sysadmin-main,sysadmin-accounts primary_auth_source: ipa
ipa_host_group: ipa ipa_host_group: ipa
ipa_host_group_desc: IPA service ipa_host_group_desc: IPA service
ipa_client_shell_groups: ipa_client_shell_groups:

5
playbooks/groups/ipa.yml
View file

@ -16,8 +16,7 @@
- nagios_client - nagios_client
- collectd/base - collectd/base
- hosts - hosts
- { role: fas_client, when: env != "staging" } - ipa/client
- { role: ipa/client, when: env == "staging" }
- rsyncd - rsyncd
- sudo - sudo
- { role: openvpn/client, - { role: openvpn/client,
@ -27,8 +26,6 @@
- import_tasks: "{{ tasks_path }}/yumrepos.yml" - import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks: tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != 'staging'
- import_tasks: "{{ tasks_path }}/motd.yml" - import_tasks: "{{ tasks_path }}/motd.yml"
handlers: handlers: