mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
91c4b83311
Current version of ansible-list pre-commit hook required changes in the ansible-freeipa yamllint configuration and these changes triggered issues in the current playbooks on roles and tests. This patch adds the required changes to yaml lint configuration and fixes the affected playbooks. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
84 lines
2.2 KiB
YAML
84 lines
2.2 KiB
YAML
---
|
|
- name: Generate certificates
|
|
hosts: localhost
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Run generate-certificates.sh
|
|
ansible.builtin.command: >
|
|
/bin/bash
|
|
generate-certificates.sh create
|
|
"{{ groups.ipareplicas[0] }}"
|
|
"{{ ipareplica_domain | default(groups.ipareplicas[0].split('.')[1:] | join('.')) }}"
|
|
args:
|
|
chdir: "{{ playbook_dir }}"
|
|
|
|
- name: Test ipareplicas installation without CA
|
|
hosts: ipareplicas
|
|
become: true
|
|
|
|
vars:
|
|
# Root CA certificate
|
|
ipareplica_ca_cert_files:
|
|
- /root/ca-less-test/ca.crt
|
|
# Directory server certificates
|
|
ipareplica_dirsrv_cert_name: dirsrv-cert
|
|
ipareplica_dirsrv_cert_files:
|
|
- /root/ca-less-test/dirsrv.p12
|
|
ipareplica_dirsrv_pin: SomePKCS12password
|
|
# Apache certificates
|
|
ipareplica_http_cert_name: httpd-cert
|
|
ipareplica_http_cert_files:
|
|
- /root/ca-less-test/httpd.p12
|
|
ipareplica_http_pin: SomePKCS12password
|
|
# PKINIT configuration
|
|
ipareplica_no_pkinit: no
|
|
ipareplica_pkinit_cert_name: pkinit-cert
|
|
ipareplica_pkinit_cert_files:
|
|
- /root/ca-less-test/pkinit.p12
|
|
ipareplica_pkinit_pin: SomePKCS12password
|
|
|
|
pre_tasks:
|
|
- name: Remove "/root/ca-less-test"
|
|
ansible.builtin.file:
|
|
path: "/root/ca-less-test"
|
|
state: absent
|
|
|
|
- name: Generate "/root/ca-less-test"
|
|
ansible.builtin.file:
|
|
path: "/root/ca-less-test"
|
|
state: directory
|
|
mode: "0775"
|
|
|
|
- name: Copy CA certificate
|
|
ansible.builtin.copy:
|
|
src: "{{ playbook_dir }}/certificates/root-ca/cert.pem"
|
|
dest: "/root/ca-less-test/ca.crt"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
|
|
- name: Copy p12 certificates
|
|
ansible.builtin.copy:
|
|
src: "{{ playbook_dir }}/certificates/{{ item }}/{{ groups.ipareplicas[0] }}/cert.p12"
|
|
dest: "/root/ca-less-test/{{ item }}.p12"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
with_items:
|
|
- dirsrv
|
|
- httpd
|
|
- pkinit
|
|
|
|
roles:
|
|
- role: ipareplica
|
|
state: present
|
|
|
|
post_tasks:
|
|
- name: Fix KDC certificate permissions
|
|
ansible.builtin.file:
|
|
path: /var/kerberos/krb5kdc/kdc.crt
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|