mirror of
https://github.com/openshift/community.okd.git
synced 2026-03-26 19:03:14 +00:00
c2f1d722dc
* Update ldap image in tests The bitnami openldap image we had been using is no longer being support by them. It has been moved over to a bitnamilegacy namespace, but it's not clear how long that will remain. We should find a better solution at some point. * Update versions in Dockerfile The dockerfile was built around python3.9 which forced the use of ansible 2.15. This updates the base image to ubi10 which uses python3.12 by default. The version of the oc/kubectl client package was updated to 4.20 as well. * Try and make it work * Remove backslash * debug * try and force 3.12 * use ubi9 * debug * try adding packaging * debug * Lots of changes * Add check for none * Fix python version
65 lines
1.9 KiB
YAML
65 lines
1.9 KiB
YAML
---
|
|
- name: Get cluster information
|
|
kubernetes.core.k8s_cluster_info:
|
|
register: info
|
|
|
|
- name: Create LDAP Pod
|
|
community.okd.k8s:
|
|
namespace: "default"
|
|
wait: yes
|
|
definition:
|
|
kind: Pod
|
|
apiVersion: v1
|
|
metadata:
|
|
name: ldap-pod
|
|
labels:
|
|
app: ldap
|
|
spec:
|
|
containers:
|
|
- name: ldap
|
|
# bitnami is no longer supporting this image. we should probably find a replacement
|
|
image: docker.io/bitnamilegacy/openldap:latest
|
|
env:
|
|
- name: LDAP_ADMIN_USERNAME
|
|
value: "{{ ldap_admin_user }}"
|
|
- name: LDAP_ADMIN_PASSWORD
|
|
value: "{{ ldap_admin_password }}"
|
|
- name: LDAP_USERS
|
|
value: "ansible"
|
|
- name: LDAP_PASSWORDS
|
|
value: "ansible123"
|
|
- name: LDAP_ROOT
|
|
value: "{{ ldap_root }}"
|
|
ports:
|
|
- containerPort: 1389
|
|
name: ldap-server
|
|
register: pod_info
|
|
|
|
- name: Set LDAP Common facts
|
|
set_fact:
|
|
# we can use the Pod IP directly because the integration are running inside a Pod in the
|
|
# same openshift cluster
|
|
ldap_server_uri: "ldap://{{ pod_info.result.status.podIP }}:1389"
|
|
ldap_bind_dn: "cn={{ ldap_admin_user }},{{ ldap_root }}"
|
|
ldap_bind_pw: "{{ ldap_admin_password }}"
|
|
|
|
- name: Display LDAP Server URI
|
|
debug:
|
|
var: ldap_server_uri
|
|
|
|
- name: Test existing user from LDAP server
|
|
openshift_ldap_entry_info:
|
|
bind_dn: "{{ ldap_bind_dn }}"
|
|
bind_pw: "{{ ldap_bind_pw }}"
|
|
dn: "ou=users,{{ ldap_root }}"
|
|
server_uri: "{{ ldap_server_uri }}"
|
|
register: test_ldap
|
|
retries: 10
|
|
delay: 5
|
|
until: test_ldap is not failed
|
|
|
|
- include_tasks: "tasks/python-ldap-not-installed.yml"
|
|
- include_tasks: "tasks/rfc2307.yml"
|
|
- include_tasks: "tasks/activeDirectory.yml"
|
|
- include_tasks: "tasks/augmentedActiveDirectory.yml"
|