fa63e4f3d9
The community.general ipa modules used in tripleo-ipa don't work under FIPS deployment. This patch is fixing that by replacing it with the ansible-freeipa ipa modules. Co-Author: Ade Lee <alee@redhat.com> Co-Author: Grzegorz Grasza <xek@redhat.com> Change-Id: Ibfd1b34fdf3d533579512f531ac8619b356f9ba0
53 lines
1.6 KiB
YAML
53 lines
1.6 KiB
YAML
---
|
|
# Copyright 2020 Red Hat, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# The tasks in this file perform the registration process for a service.
|
|
#
|
|
# The following variable are required:
|
|
# - {item} : which is an ordered tuple of the form:
|
|
# -- { sub_host, service }
|
|
#
|
|
# An example of this is:
|
|
# { "controller-5.storagemgmt.example.com", "haproxy" }
|
|
#
|
|
# At this time, the final value in the tuple is unused.
|
|
|
|
- name: set variables
|
|
set_fact:
|
|
sub_host: "{{ item.0 }}"
|
|
service: "{{ item.1 }}"
|
|
|
|
- name: add sub_host
|
|
freeipa.ansible_freeipa.ipahost:
|
|
fqdn: "{{ sub_host }}"
|
|
force: true
|
|
state: present
|
|
become: true
|
|
|
|
- name: add service
|
|
freeipa.ansible_freeipa.ipaservice:
|
|
name: "{{ service }}/{{ sub_host }}"
|
|
force: true
|
|
state: present
|
|
become: true
|
|
|
|
- name: add host to managed_hosts if needed (shell)
|
|
shell: |
|
|
ipa service-add-host --hosts "{{ base_server_fqdn }}" "{{ service }}"/"{{ sub_host }}"
|
|
register: service_add_out
|
|
failed_when: service_add_out.failed and 'This entry is already a member' not in service_add_out.stdout
|
|
become: true
|