infrastructure/ansible
2
0
Fork 0
Code Pull requests 7 Activity Actions

ipa/client: enable for fedimg in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent b1f9bebc86
commit 55755bfe9b
2 changed files with 2 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/fedimg
View file

@ -14,9 +14,7 @@ tcp_ports: [
3007, 3008, 3009, 3010, 3011, 3012, 3013,
]
# TODO, restrict this down to just sysadmin-releng
fas_client_groups: sysadmin-datanommer,sysadmin-releng,sysadmin-fedimg
primary_auth_source: ipa
ipa_host_group: fedimg
ipa_client_shell_groups:
- sysadmin-releng

4
playbooks/groups/fedimg.yml
View file

@ -16,8 +16,7 @@
roles:
- base
- rkhunter
- { role: ipa/client, when: env == "staging" }
- { role: fas_client, when: env != "staging" }
- ipa/client
- nagios_client
- hosts
- collectd/base
@ -32,7 +31,6 @@
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers: