This commit is contained in:
nazunalika 2021-01-14 21:28:47 -07:00
parent 13ecd9fc6d
commit 608c1e24c8
5 changed files with 20 additions and 7 deletions

View File

@ -3,7 +3,6 @@
ipaadmin_principal: admin
ipaclient_mkhomedir: true
ipaserver_realm: ROCKYLINUX.ORG
ipaserver_hostname: ipa002.rockylinux.org
ipareplica_domain: rockylinux.org
ipareplica_auto_forwarders: true
ipareplica_setup_firewalld: true

View File

@ -26,7 +26,7 @@
ipaadmin_password: "{{ ipaadmin_password }}"
name: "{{ item.role }}"
privilege: "{{ item.privilege }}"
user: "{{ item.user }}"
user: "{{ item.user|default(omit) }}"
loop: "{{ ipaprivileges }}"
when: ipaprivileges is defined
tags:
@ -37,7 +37,7 @@
ipaadmin_password: "{{ ipaadmin_password }}"
name: "{{ item.role }}"
privilege: "{{ item.privileges }}"
user: "{{ item.user }}"
user: "{{ item.user|default(omit) }}"
loop: "{{ iparoles }}"
when: iparoles is defined
tags:

View File

@ -8,7 +8,7 @@
name: "{{ item.name }}"
first: "{{ item.first }}"
last: "{{ item.last }}"
email: "{{ item.email }}"
email: "{{ item.email|default(omit) }}"
password: "{{ item.password }}"
title: "{{ item.title }}"
loginshell: "{{ item.loginshell }}"
@ -23,7 +23,7 @@
name: "{{ item.name }}"
first: "{{ item.first }}"
last: "{{ item.last }}"
email: "{{ item.email }}"
email: "{{ item.email|default(omit) }}"
password: "{{ item.password }}"
title: "{{ item.title }}"
loginshell: "{{ item.loginshell }}"
@ -38,7 +38,7 @@
name: "{{ item.name }}"
first: "{{ item.first }}"
last: "{{ item.last }}"
email: "{{ item.email }}"
email: "{{ item.email|default(omit) }}"
password: "{{ item.password }}"
title: "{{ item.title }}"
loginshell: "{{ item.loginshell }}"

View File

@ -2,7 +2,7 @@
# This builds out the initial users and groups for the rocky linux infra
- name: Create our initial users
hosts: ipaserver
become: false
become: true
gather_facts: false
vars_files:
- vars/vaults/encpass.yml

View File

@ -20,6 +20,19 @@ ipagroups:
description: Quality Assurance Team
- group: marketing
description: Marketing
- group: rocky
description: Rocky Linux Team
user:
- label
- gmk
- brian
- hbjy
- jorp
- neil
- rlh
- rfelsburg
- tg
- bagner
- group: rockyadm
description: Rocky Linux Administrators - Only Admin Accounts
user:
@ -62,6 +75,7 @@ ipagroups:
- group: services
description: Rocky Linux Service Accounts
user:
- userman
- hostman
- kerbman
- rockykoji