mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-30 11:24:50 +00:00
Merge pull request #1334 from rjeffman/update_c10s_image
Update c10s image
This commit is contained in:
@@ -48,7 +48,7 @@
|
||||
ansible.builtin.file:
|
||||
path: "/root/ca-less-test"
|
||||
state: directory
|
||||
mode: 0775
|
||||
mode: "0775"
|
||||
|
||||
- name: Copy CA certificate
|
||||
ansible.builtin.copy:
|
||||
|
||||
@@ -48,7 +48,7 @@
|
||||
ansible.builtin.file:
|
||||
path: "/root/ca-less-test"
|
||||
state: directory
|
||||
mode: 0775
|
||||
mode: "0775"
|
||||
|
||||
- name: Copy CA certificate
|
||||
ansible.builtin.copy:
|
||||
|
||||
@@ -47,7 +47,7 @@
|
||||
ansible.builtin.copy:
|
||||
dest: "/root/host.csr"
|
||||
content: "{{ host_req.stdout }}"
|
||||
mode: 0644
|
||||
mode: "0644"
|
||||
|
||||
# TESTS
|
||||
|
||||
|
||||
@@ -45,7 +45,7 @@
|
||||
ansible.builtin.copy:
|
||||
dest: "/root/user.csr"
|
||||
content: "{{ user_req.stdout }}"
|
||||
mode: 0644
|
||||
mode: "0644"
|
||||
|
||||
# TESTS
|
||||
|
||||
|
||||
@@ -28,7 +28,7 @@
|
||||
become: true
|
||||
vars:
|
||||
ipaserver_external_cert_files_from_controller: "{{ groups.ipaserver[0] + '-chain.crt' }}"
|
||||
#ipaserver_external_ca_file: "{{ groups.ipaserver[0] + '-cacert.asc' }}"
|
||||
# ipaserver_external_ca_file: "{{ groups.ipaserver[0] + '-cacert.asc' }}"
|
||||
|
||||
roles:
|
||||
- role: ipaserver
|
||||
|
||||
@@ -34,7 +34,7 @@
|
||||
become: true
|
||||
vars:
|
||||
ipaserver_external_cert_files: "/root/chain.crt"
|
||||
#ipaserver_external_ca_file: "cacert.asc"
|
||||
# ipaserver_external_ca_file: "cacert.asc"
|
||||
|
||||
pre_tasks:
|
||||
- name: Copy "{{ groups.ipaserver[0] + '-chain.crt' }}" to /root/chain.crt on node
|
||||
|
||||
@@ -298,11 +298,11 @@
|
||||
register: result
|
||||
failed_when: result.changed or result.failed
|
||||
|
||||
#- ipagroup:
|
||||
# name: group1
|
||||
# user:
|
||||
# - user7
|
||||
# action: member
|
||||
# - ipagroup:
|
||||
# name: group1
|
||||
# user:
|
||||
# - user7
|
||||
# action: member
|
||||
|
||||
- name: Ensure user user7 is absent in group group1
|
||||
ipagroup:
|
||||
|
||||
@@ -191,35 +191,35 @@
|
||||
|
||||
# disabled can only be checked with enabled hosts, all hosts above are
|
||||
# not enabled.
|
||||
#- name: Hosts host1..host6 disabled
|
||||
# ipahost:
|
||||
# ipaadmin_password: SomeADMINpassword
|
||||
# ipaapi_context: "{{ ipa_context | default(omit) }}"
|
||||
# name:
|
||||
# - "{{ host1_fqdn }}"
|
||||
# - "{{ host2_fqdn }}"
|
||||
# - "{{ host3_fqdn }}"
|
||||
# - "{{ host4_fqdn }}"
|
||||
# - "{{ host5_fqdn }}"
|
||||
# - "{{ host6_fqdn }}"
|
||||
# state: disabled
|
||||
# register: result
|
||||
# failed_when: not result.changed or result.failed
|
||||
# - name: Hosts host1..host6 disabled
|
||||
# ipahost:
|
||||
# ipaadmin_password: SomeADMINpassword
|
||||
# ipaapi_context: "{{ ipa_context | default(omit) }}"
|
||||
# name:
|
||||
# - "{{ host1_fqdn }}"
|
||||
# - "{{ host2_fqdn }}"
|
||||
# - "{{ host3_fqdn }}"
|
||||
# - "{{ host4_fqdn }}"
|
||||
# - "{{ host5_fqdn }}"
|
||||
# - "{{ host6_fqdn }}"
|
||||
# state: disabled
|
||||
# register: result
|
||||
# failed_when: not result.changed or result.failed
|
||||
#
|
||||
#- name: Hosts host1..host6 disabled again
|
||||
# ipahost:
|
||||
# ipaadmin_password: SomeADMINpassword
|
||||
# ipaapi_context: "{{ ipa_context | default(omit) }}"
|
||||
# name:
|
||||
# - "{{ host1_fqdn }}"
|
||||
# - "{{ host2_fqdn }}"
|
||||
# - "{{ host3_fqdn }}"
|
||||
# - "{{ host4_fqdn }}"
|
||||
# - "{{ host5_fqdn }}"
|
||||
# - "{{ host6_fqdn }}"
|
||||
# state: disabled
|
||||
# register: result
|
||||
# failed_when: result.changed or result.failed
|
||||
# - name: Hosts host1..host6 disabled again
|
||||
# ipahost:
|
||||
# ipaadmin_password: SomeADMINpassword
|
||||
# ipaapi_context: "{{ ipa_context | default(omit) }}"
|
||||
# name:
|
||||
# - "{{ host1_fqdn }}"
|
||||
# - "{{ host2_fqdn }}"
|
||||
# - "{{ host3_fqdn }}"
|
||||
# - "{{ host4_fqdn }}"
|
||||
# - "{{ host5_fqdn }}"
|
||||
# - "{{ host6_fqdn }}"
|
||||
# state: disabled
|
||||
# register: result
|
||||
# failed_when: result.changed or result.failed
|
||||
|
||||
- name: Hosts host1..host6 absent
|
||||
ipahost:
|
||||
|
||||
@@ -56,7 +56,7 @@
|
||||
first: pinky
|
||||
last: Acme
|
||||
initials: pa
|
||||
#password: foo2
|
||||
# password: foo2
|
||||
principal: pa
|
||||
random: yes
|
||||
street: PinkyStreet
|
||||
@@ -73,8 +73,8 @@
|
||||
# sshpubkey
|
||||
userauthtype: password,radius,otp
|
||||
userclass: PinkyUserClass
|
||||
#radius: "http://some.link/"
|
||||
#radiususer: PinkyRadiusUser
|
||||
# radius: "http://some.link/"
|
||||
# radiususer: PinkyRadiusUser
|
||||
departmentnumber: "1234"
|
||||
employeenumber: "0815"
|
||||
employeetype: "PinkyExmployeeType"
|
||||
@@ -82,8 +82,8 @@
|
||||
# certificate
|
||||
noprivate: yes
|
||||
nomembers: false
|
||||
#issuer: PinkyIssuer
|
||||
#subject: PinkySubject
|
||||
# issuer: PinkyIssuer
|
||||
# subject: PinkySubject
|
||||
register: result
|
||||
failed_when: not result.changed or result.failed
|
||||
|
||||
|
||||
@@ -190,7 +190,7 @@
|
||||
first: pinky
|
||||
last: Acme
|
||||
initials: pa
|
||||
#password: foo2
|
||||
# password: foo2
|
||||
principal: pa
|
||||
random: yes
|
||||
street: PinkyStreet
|
||||
@@ -207,8 +207,8 @@
|
||||
# sshpubkey
|
||||
userauthtype: password,radius,otp
|
||||
userclass: PinkyUserClass
|
||||
#radius: "http://some.link/"
|
||||
#radiususer: PinkyRadiusUser
|
||||
# radius: "http://some.link/"
|
||||
# radiususer: PinkyRadiusUser
|
||||
departmentnumber: "1234"
|
||||
employeenumber: "0815"
|
||||
employeetype: "PinkyExmployeeType"
|
||||
@@ -216,8 +216,8 @@
|
||||
# certificate
|
||||
noprivate: yes
|
||||
nomembers: false
|
||||
#issuer: PinkyIssuer
|
||||
#subject: PinkySubject
|
||||
# issuer: PinkyIssuer
|
||||
# subject: PinkySubject
|
||||
register: result
|
||||
failed_when: not result.changed or result.failed
|
||||
|
||||
@@ -234,7 +234,7 @@
|
||||
first: pinky
|
||||
last: Acme
|
||||
initials: pa
|
||||
#password: foo2
|
||||
# password: foo2
|
||||
principal: pa
|
||||
random: yes
|
||||
street: PinkyStreet
|
||||
@@ -251,8 +251,8 @@
|
||||
# sshpubkey
|
||||
userauthtype: password,radius,otp
|
||||
userclass: PinkyUserClass
|
||||
#radius: "http://some.link/"
|
||||
#radiususer: PinkyRadiusUser
|
||||
# radius: "http://some.link/"
|
||||
# radiususer: PinkyRadiusUser
|
||||
departmentnumber: "1234"
|
||||
employeenumber: "0815"
|
||||
employeetype: "PinkyExmployeeType"
|
||||
@@ -260,8 +260,8 @@
|
||||
# certificate
|
||||
noprivate: yes
|
||||
nomembers: false
|
||||
#issuer: PinkyIssuer
|
||||
#subject: PinkySubject
|
||||
# issuer: PinkyIssuer
|
||||
# subject: PinkySubject
|
||||
register: result
|
||||
failed_when: result.changed or result.failed
|
||||
|
||||
|
||||
@@ -20,7 +20,7 @@
|
||||
ansible.builtin.copy:
|
||||
src: "{{ playbook_dir }}/{{ item }}"
|
||||
dest: "{{ ansible_facts['env'].HOME }}/{{ item }}"
|
||||
mode: 0644
|
||||
mode: "0644"
|
||||
with_items:
|
||||
- A_private.pem
|
||||
- A_public.pem
|
||||
|
||||
Reference in New Issue
Block a user