Go to file

Lance Bragstad d3d47118db Use appropriate permissions for the keytab

A recent bug [0] and fix upstream no longer ensures that we use the
tripleo-admin user as the ansible_ssh_user when invoking ansible
playbooks against the undercloud. This means we need to update the
keytab group to something else. Using root makes sense because the user
invoking the overcloud installation should already have root access.

In addition to changing the group, this patch updates the appropriate
tasks so there run with `become: true`, allowing them to access the
keytab.

[0] https://bugs.launchpad.net/tripleo/+bug/1884123

Partial-Bug: 1886870

Change-Id: I523d17f48b8e49e28a1b3becfd5e0cdf044ff742

2020-07-16 08:18:57 -05:00

playbooks

Move playbooks to the appropriate directory

2020-03-27 14:36:05 +01:00

scripts

Properly handle dependencies when running tests locally

2020-03-18 14:27:28 +00:00

tests

Initialize repo and integrate zuul

2020-03-18 00:41:55 +00:00

tripleo_ipa

Use appropriate permissions for the keytab

2020-07-16 08:18:57 -05:00

zuul.d

Fix missing virtualenv in molecule tests

2020-07-15 12:30:58 -05:00

.gitignore

Initialize repo and integrate zuul

2020-03-18 00:41:55 +00:00

.gitreview

Added .gitreview

2020-03-13 16:34:26 +00:00

.pre-commit-config.yaml

Add a custom filter for parsing instance metadata

2020-03-23 13:18:55 +01:00

.stestr.conf

Add a custom filter for parsing instance metadata

2020-03-23 13:18:55 +01:00

ansible-requirements.txt

Add a custom filter for parsing instance metadata

2020-03-23 13:18:55 +01:00

bindep.txt

Add code to deregister nodes and services from freeipa

2020-03-25 16:42:21 +01:00

LICENSE

Add license

2020-03-18 09:45:08 +00:00

molecule-requirements.txt

Add role to add ipa services for tls-everywhere

2020-03-24 14:41:42 +01:00

README.rst

Update readme with installation instructions

2020-03-27 12:17:15 +01:00

requirements.txt

Add tripleo_ipa_dns role

2020-04-03 11:51:08 +02:00

setup.cfg

Add a custom filter for parsing instance metadata

2020-03-23 13:18:55 +01:00

setup.py

Initialize repo and integrate zuul

2020-03-18 00:41:55 +00:00

test-requirements.txt

Add a custom filter for parsing instance metadata

2020-03-23 13:18:55 +01:00

tox.ini

Add tripleo_ipa_dns role

2020-04-03 11:51:08 +02:00

README.rst

tripleo-ipa

This repository contains Ansible for use integrating TripleO with FreeIPA.

Installation

$ pip install --prefix=/usr tripleo-ipa

Or, if you are installing from source, in the project directory:

$ python setup.py install --prefix=/usr

Contributing

You can create an environment to develop locally using the following.

$ python3.7 -m virtualenv --system-site-packages .venv
$ .venv/bin/pip3 install -r molecule-requirements.txt