mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-09 18:25:53 +00:00
c708ef781e
There are currently only external signed CA tests: external-signed-ca-with-automatic-copy external-signed-ca-with-manual-copy
37 lines
885 B
YAML
37 lines
885 B
YAML
---
|
|
- name: Playbook to configure IPA server step1
|
|
hosts: ipaserver
|
|
become: true
|
|
vars:
|
|
ipaserver_external_ca: yes
|
|
ipaserver_copy_csr_to_controller: yes
|
|
|
|
roles:
|
|
- role: ipaserver
|
|
state: present
|
|
|
|
- name: Create CA, get /root/ipa.csr signed by your CA, ..
|
|
hosts: localhost
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Run external-ca.sh
|
|
command: >
|
|
/bin/bash
|
|
external-ca.sh
|
|
"{{ groups.ipaserver[0] }}"
|
|
"{{ ipaserver_domain | default(groups.ipaserver[0].split('.')[1:] | join ('.')) }}"
|
|
args:
|
|
chdir: "{{ playbook_dir }}"
|
|
|
|
- name: Playbook to configure IPA server step2
|
|
hosts: ipaserver
|
|
become: true
|
|
vars:
|
|
ipaserver_external_cert_files_from_controller: "{{ groups.ipaserver[0] + '-chain.crt' }}"
|
|
#ipaserver_external_ca_file: "{{ groups.ipaserver[0] + '-cacert.asc' }}"
|
|
|
|
roles:
|
|
- role: ipaserver
|
|
state: present
|