mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-08 14:23:11 +00:00
45d8008033
This adds support for the --external-ca option to ipaserver. Lots of
additional tests and checks from ServerInstallInterface.__init__ have
been added to ipaserver_test. Also duplicate tests cna checks have been
removed.
Installer settings in ansible_ipa_server module_util are now also set
to the defaults that are used in Installable, ServerInstallInterface,
ServerMasterInstall, ADTrustInstallInterface and Uninstall.
The /root/ipa.csr file generated on the node in ca.install_step_0 will
be copied to the controller as "{{ inventory_hostname }}-ipa.csr".
The new task file copy_external_cert.yml has been added to copy the
generated certificate defined in ipaserver_external_cert_files to the node
to continue with ca.install_step_1.
The tasks/install.yml file has been adapted to make sure that the steps
that will be done in step two will be skipped after step one has been
done.
13 lines
506 B
YAML
13 lines
506 B
YAML
- name: Install - Initialize ipaserver_external_cert_files
|
|
set_fact:
|
|
ipaserver_external_cert_files: []
|
|
when: ipaserver_external_cert_files is undefined
|
|
- name: Install - Copy "{{ item }}" "{{ inventory_hostname }}':/root/'{{ item }}"
|
|
copy:
|
|
src: "{{ item }}"
|
|
dest: "/root/{{ item }}"
|
|
force: yes
|
|
- name: Install - Extend ipaserver_external_cert_files with "/root/{{ item }}"
|
|
set_fact:
|
|
ipaserver_external_cert_files: "{{ ipaserver_external_cert_files }} + [ '/root/{{ item }}' ]"
|