Merge pull request #14978 from rocky-linux/develop

Develop

ansible/inventories/production/group_vars/rabbitmq/main.yml

@@ -1,5 +1,5 @@
 ---
 # RabbitMQ Staging Vars
-rabbitmq_cluster_name: "rabbitprod"
+rabbitmq_cluster_name: "rabbit"
 rabbitmq_cluster_list: "{{ groups['rabbitmq'] }}"
 rabbitmq_env: "production"

ansible/inventories/staging/group_vars/rabbitmq/main.yml

@@ -1,5 +1,5 @@
 ---
 # RabbitMQ Staging Vars
-rabbitmq_cluster_name: "rabbitstage"
+rabbitmq_cluster_name: "rabbit"
 rabbitmq_cluster_list: "{{ groups['rabbitmq'] }}"
 rabbitmq_env: "staging"

ansible/playbooks/adhoc-ipadnsrecord.yml

@@ -16,7 +16,7 @@
   become: false
   gather_facts: false
   vars_files:
-  - vars/vaults/encpass.yml
+  - vars/vaults/hostman.yml
 
   tasks:
     - name: "Checking for user variables"

ansible/playbooks/adhoc-ipadnszone.yml

@@ -8,7 +8,7 @@
   become: false
   gather_facts: false
   vars_files:
-  - vars/vaults/encpass.yml
+  - vars/vaults/hostman.yml
 
   tasks:
     - name: "Checking for user variables"

ansible/playbooks/adhoc-ipagetkeytab.yml

@@ -18,12 +18,13 @@
   become: true
   gather_facts: false
   vars_files:
-    - vars/vaults/encpass.yml
+    - vars/vaults/kerbman.yml
 
   tasks:
     - name: "Checking for user variables"
       assert:
         that:
+          - ipa_admin | mandatory
           - ipaadmin_password | mandatory
           - ipa_service | mandatory
           - ipa_keytab_fullpath | mandatory

ansible/playbooks/adhoc-ipagroup.yml

@@ -10,7 +10,7 @@
   become: false
   gather_facts: false
   vars_files:
-  - vars/vaults/encpass.yml
+  - vars/vaults/userman.yml
 
   tasks:
     - name: "Checking for user variables"

ansible/playbooks/adhoc-ipaservice.yml

@@ -7,7 +7,7 @@
   become: false
   gather_facts: false
   vars_files:
-    - vars/vaults/encpass.yml
+    - vars/vaults/kerbman.yml
 
   tasks:
     - name: "Checking for user variables"

ansible/playbooks/adhoc-ipauser-disable.yml

@@ -0,0 +1,29 @@
+---
+# This playbook is meant to be used with callable variables, like adhoc or AWX.
+# What: Creates users in the idm infrastructure based on the variables provided.
+
+- name: Create a User
+  hosts: ipaserver
+  become: false
+  gather_facts: false
+  vars_files:
+  - vars/vaults/userman.yml
+
+  tasks:
+    - name: "Checking for user variables"
+      assert:
+        that:
+          - ipa_admin | mandatory
+          - ipaadmin_password | mandatory
+          - ipa_name | mandatory
+        success_msg: "Required variables provided"
+        fail_msg: "We are missing user information or ipa admin password"
+
+    - name: "Disabling User Account"
+      freeipa.ansible_freeipa.ipauser:
+        ipaadmin_principal: "{{ ipa_admin }}"
+        ipaadmin_password: "{{ ipaadmin_password }}"
+        name: "{{ ipa_name }}"
+        state: disabled
+      tags:
+        - users

ansible/playbooks/adhoc-ipauser-enable.yml

@@ -0,0 +1,29 @@
+---
+# This playbook is meant to be used with callable variables, like adhoc or AWX.
+# What: Creates users in the idm infrastructure based on the variables provided.
+
+- name: Create a User
+  hosts: ipaserver
+  become: false
+  gather_facts: false
+  vars_files:
+  - vars/vaults/userman.yml
+
+  tasks:
+    - name: "Checking for user variables"
+      assert:
+        that:
+          - ipa_admin | mandatory
+          - ipaadmin_password | mandatory
+          - ipa_name | mandatory
+        success_msg: "Required variables provided"
+        fail_msg: "We are missing user information or ipa admin password"
+
+    - name: "Enabling User Account"
+      freeipa.ansible_freeipa.ipauser:
+        ipaadmin_principal: "{{ ipa_admin }}"
+        ipaadmin_password: "{{ ipaadmin_password }}"
+        name: "{{ ipa_name }}"
+        state: enabled
+      tags:
+        - users

ansible/playbooks/adhoc-ipauser.yml

@@ -7,7 +7,7 @@
   become: false
   gather_facts: false
   vars_files:
-  - vars/vaults/encpass.yml
+  - vars/vaults/userman.yml
 
   tasks:
     - name: "Checking for user variables"

ansible/playbooks/role-rocky-rabbitmq.yml

@@ -54,7 +54,7 @@
     # rocky-release-rabbitmq repo
     - name: Install centos rabbitmq
       yum:
-        name: centos-release-rabbitmq
+        name: centos-release-rabbitmq-38
         state: present
       tags:
         - packages

ansible/playbooks/vars/ipa/ipaprivs.yml

@@ -26,6 +26,13 @@ iparoles:
       - "Netgroups Administrators"
     user:
       - hostman
+  - role: Kerberos Managers
+    description: Kerberos Key Managers
+    privileges:
+      - "Privileges - Kerberos Managers"
+      - "Service Administrators"
+    user:
+      - kerbman
   - role: IPA User Managers
     description: Rocky IPA User Managers responsible for idm flow
     privileges: