mirror of
https://github.com/rocky-linux/infrastructure
synced 2024-11-14 01:31:24 +00:00
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
|
---
|
||
|
|
# This playbook is meant to be used with callable variables, like adhoc or AWX.
|
||
|
|
# What: Pulls keytabs for a kerberos service
|
||
|
|
# What is expected:
|
||
|
|
# -> ipaService, using this format: SVC/hostname.rockylinux.org@ROCKYLINUX.ORG
|
||
|
|
# -> ipaKeytabFullPath: The full path to the keytab. Example: /etc/gitlab/gitlab.keytab
|
||
|
|
# -> ipaServer: This needs to be one of the IPA servers
|
||
|
|
|
||
|
|
- name: Pull keytab from IPA
|
||
|
|
hosts: "{{ host }}"
|
||
|
|
become: false
|
||
|
|
gather_facts: false
|
||
|
|
vars_files:
|
||
|
|
- vars/encpass.yml
|
||
|
|
|
||
|
|
tasks:
|
||
|
|
- name: "Checking for user variables"
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- ipaadmin_password | mandatory
|
||
|
|
- ipaService | mandatory
|
||
|
|
- ipaKeytabFullPath | mandatory
|
||
|
|
- ipaServer | mandatory
|
||
|
|
success_msg: "Required variables provided"
|
||
|
|
fail_msg: "We are missing required information"
|
||
|
|
|
||
|
|
- name: "Pulling keytab"
|
||
|
|
command: "ipa-getkeytab -s {{ ipaServer }} -p {{ ipaService }} -k {{ ipaKeytabFullPath }}"
|
||
|
|
register: ipakeytab_result
|
||
|
|
changed_when:
|
||
|
|
- ipakeytab_result.rc == 0
|
||
|
|
tags:
|
||
|
|
- keytab
|