mono-infrastructure/ansible/playbooks/init-rocky-ipa-team.yml
nazunalika 8dc0268a50 IPA Privileges
This release adds support for privileges and roles for the initial IPA
team accounts.
2020-12-20 22:05:52 -07:00

36 lines
917 B
YAML

---
# This builds out the initial users and groups for the rocky linux infra
- name: Create our initial users
hosts: ipaserver
become: false
gather_facts: false
vars_files:
- vars/encpass.yml
- vars/users.yml
- vars/adminusers.yml
- vars/svcusers.yml
- vars/groups.yml
- vars/ipaprivs.yml
tasks:
- name: "Checking for user variables"
assert:
that:
- ipaadmin_password | mandatory
- users | mandatory
- ipagroups | mandatory
success_msg: "Required variables provided"
fail_msg: "We are missing users or ipa admin password"
- name: "Start users"
import_tasks: import-rockyusers.yml
- name: "Start groups"
import_tasks: import-rockygroups.yml
- name: "Start sudo for admins"
import_tasks: import-rockysudo.yml
- name: "Start privileges for services"
import_tasks: import-rockyipaprivs.yml