diff --git a/ansible/README.md b/ansible/README.md index bbee7f9..ae81acd 100644 --- a/ansible/README.md +++ b/ansible/README.md @@ -3,3 +3,28 @@ Ansible playbooks, roles, modules, etc will come here. Documentation to come soon. Each playbook should have comments or a name descripter that explains what the playbook does or how it is used. If not available, README-... files can be used in place. + +## Structure + +``` +files -> As the name implies, non-templated files go here +group_vars -> Group Variables go here if they are not fulfilled in an inventory +host_vars -> Host variables go here +inventory -> All static inventories go here +roles -> Custom roles can go here +tasks -> Common tasks come here +templates -> Templates go here +vars -> Global variables that are called with vars_files go here. This + is mainly for init and encpass.yml +``` + +## Current Playbook Naming + +``` +init-* -> Starting infrastructure playbooks that run solo or import other + playbooks that start with import- +import -> Playbooks that should be imported from the top level playbooks +role-* -> These playbooks call roles specifically for infrastructure tasks +adhoc -> These playbooks are one-off playbooks that can be used on the CLI or + in AWX +``` diff --git a/ansible/init-rocky-ipa-internal-dns.yml b/ansible/init-rocky-ipa-internal-dns.yml new file mode 100644 index 0000000..7e4cbce --- /dev/null +++ b/ansible/init-rocky-ipa-internal-dns.yml @@ -0,0 +1,22 @@ +--- +# This builds out the initial users and groups for the rocky linux infra +- name: Create our initial users + hosts: ipaserver + become: false + vars_files: + - vars/encpass.yml + + tasks: + - name: "Checking for user variables" + assert: + that: + - ipaadmin_password | mandatory + success_msg: "Required variables provided" + fail_msg: "We are missing ipa admin password" + + - name: "Start users" + ipadnszone: + ipaadmin_password: '{{ ipaadmin_password }}' + name: '{{ internal_domain }}' + with_items: + - dev.rockylinux.org diff --git a/ansible/requirements.yml b/ansible/requirements.yml new file mode 100644 index 0000000..add2528 --- /dev/null +++ b/ansible/requirements.yml @@ -0,0 +1,2 @@ +--- +- src: freeipa.ansible_freeipa