ensure ipa-fas is available

role-rocky-ipa-replica.yml

@@ -39,6 +39,19 @@
       notify:
         - reload_networkmanager
 
+    - name: Ensure epel-release is installed
+      ansible.builtin.dnf:
+        name: epel-release
+        state: present
+
+    - name: Enable CRB
+      ansible.builtin.shell: "set -o pipefail && /usr/bin/crb enable"
+
+    - name: Install ipa-fas
+      ansible.builtin.dnf:
+        name: ipa-fas
+        state: present
+
   roles:
     - role: freeipa.ansible_freeipa.ipareplica
       state: present

role-rocky-ipa.yml

@@ -44,6 +44,19 @@
       notify:
         - reload_networkmanager
 
+    - name: Ensure epel-release is installed
+      ansible.builtin.dnf:
+        name: epel-release
+        state: present
+
+    - name: Enable CRB
+      ansible.builtin.shell: "set -o pipefail && /usr/bin/crb enable"
+
+    - name: Install ipa-fas
+      ansible.builtin.dnf:
+        name: ipa-fas
+        state: present
+
   roles:
     - role: freeipa.ansible_freeipa.ipaserver
       state: present