#!/usr/bin/python # -*- coding: utf-8 -*- # Authors: # Thomas Woerner # # Based on ipa-replica-install code # # Copyright (C) 2018 Red Hat # see file 'COPYING' for use and warranty information # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . from __future__ import print_function ANSIBLE_METADATA = { 'metadata_version': '1.0', 'supported_by': 'community', 'status': ['preview'], } DOCUMENTATION = ''' --- module: ipareplica_setup_dns short description: Setup DNS description: Setup DNS options: setup_kra: description: required: yes setup_dns: description: required: yes subject_base: description: required: yes ccache: description: required: yes _top_dir: description: required: yes setup_ca: description: required: yes config_master_host_name: description: required: yes author: - Thomas Woerner ''' EXAMPLES = ''' ''' RETURN = ''' ''' from ansible.module_utils.basic import AnsibleModule from ansible.module_utils.ansible_ipa_replica import * def main(): ansible_module = AnsibleModule( argument_spec = dict( ### server ### setup_kra=dict(required=False, type='bool'), setup_dns=dict(required=False, type='bool'), ### certificate system ### subject_base=dict(required=True), ### additional ### ccache=dict(required=True), _top_dir = dict(required=True), setup_ca=dict(required=True), config_master_host_name=dict(required=True), ), supports_check_mode = True, ) ansible_module._ansible_debug = True ansible_log = AnsibleModuleLog(ansible_module) # get parameters # options = installer ### server ### options.setup_kra = ansible_module.params.get('setup_kra') options.setup_dns = ansible_module.params.get('setup_dns') ### certificate system ### options.subject_base = ansible_module.params.get('subject_base') if options.subject_base is not None: options.subject_base = DN(options.subject_base) ### additional ### ccache = ansible_module.params.get('ccache') os.environ['KRB5CCNAME'] = ccache options._top_dir = ansible_module.params.get('_top_dir') options.setup_ca = ansible_module.params.get('setup_ca') config_master_host_name = ansible_module.params.get('config_master_host_name') # init # fstore = sysrestore.FileStore(paths.SYSRESTORE) sstore = sysrestore.StateFile(paths.SYSRESTORE) ansible_log.debug("== INSTALL ==") promote = installer.promote env = gen_env_boostrap_finalize_core(paths.ETC_IPA, constants.DEFAULT_CONFIG) api_bootstrap_finalize(env) config = gen_ReplicaConfig() config.subject_base = options.subject_base config.master_host_name = config_master_host_name remote_api = gen_remote_api(config.master_host_name, paths.ETC_IPA) installer._remote_api = remote_api conn = remote_api.Backend.ldap2 ccache = os.environ['KRB5CCNAME'] # There is a api.Backend.ldap2.connect call somewhere in ca, ds, dns or # ntpinstance api.Backend.ldap2.connect() with redirect_stdout(ansible_log): if options.setup_dns: ansible_log.debug("-- INSTALL DNS --") dns.install(False, True, options, api) else: ansible_log.debug("-- DNS UPDATE_SYSTEM_RECORDS --") api.Command.dns_update_system_records() # done # ansible_module.exit_json(changed=True) if __name__ == '__main__': main()