mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 02:35:54 +00:00
d6658347c9
Use Fully Qualified Collection Name (FQCN) for ansible builtins. This is ansible.builtin.set_fact instead of set_fact for example and aplies for all actions that are part of ansible.builtin. All the replaced ansible.builtins: assert, command, copy, debug, fail, fetch, file, import_playbook, import_tasks, include_role, include_tasks, include_vars, package, set_fact, shell, slurp, stat, systemd
50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
---
|
|
- name: Playbook to configure IPA server step1
|
|
hosts: ipaserver
|
|
become: true
|
|
vars:
|
|
ipaserver_external_ca: yes
|
|
|
|
roles:
|
|
- role: ipaserver
|
|
state: present
|
|
|
|
post_tasks:
|
|
- name: Copy CSR /root/ipa.csr from node to "{{ groups.ipaserver[0] + '-ipa.csr' }}"
|
|
ansible.builtin.fetch:
|
|
src: /root/ipa.csr
|
|
dest: "{{ groups.ipaserver[0] + '-ipa.csr' }}"
|
|
flat: yes
|
|
|
|
- name: Get /root/ipa.csr, create CA, sign with our CA and copy to node
|
|
hosts: localhost
|
|
|
|
tasks:
|
|
- name: Run external-ca.sh
|
|
ansible.builtin.command: >
|
|
/bin/bash
|
|
external-ca.sh
|
|
"{{ groups.ipaserver[0] }}"
|
|
"{{ ipaserver_domain | default(groups.ipaserver[0].split('.')[1:] | join ('.')) }}"
|
|
args:
|
|
chdir: "{{ playbook_dir }}"
|
|
|
|
- name: Playbook to configure IPA server step2
|
|
hosts: ipaserver
|
|
become: true
|
|
vars:
|
|
ipaserver_external_cert_files: "/root/chain.crt"
|
|
#ipaserver_external_ca_file: "cacert.asc"
|
|
|
|
pre_tasks:
|
|
- name: Copy "{{ groups.ipaserver[0] + '-chain.crt' }}" to /root/chain.crt on node
|
|
ansible.builtin.copy:
|
|
src: "{{ groups.ipaserver[0] + '-chain.crt' }}"
|
|
dest: "/root/chain.crt"
|
|
force: yes
|
|
mode: preserve
|
|
|
|
roles:
|
|
- role: ipaserver
|
|
state: present
|