summaryrefslogtreecommitdiffstats
path: root/roles/fas_server
diff options
context:
space:
mode:
authorPatrick Uiterwijk <puiterwijk@redhat.com>2016-10-13 15:39:34 +0000
committerPatrick Uiterwijk <puiterwijk@redhat.com>2016-10-13 15:40:52 +0000
commit7b19073b0d9adf8cb87433d518d5fb1e21472260 (patch)
treec18fd2d9bf2831736bd618fb3e5eb879ca2fb0d3 /roles/fas_server
parent2cb844e02bfaf1d245a232fa6ca01e6f006a763d (diff)
downloadansible-7b19073b0d9adf8cb87433d518d5fb1e21472260.tar.gz
ansible-7b19073b0d9adf8cb87433d518d5fb1e21472260.tar.xz
ansible-7b19073b0d9adf8cb87433d518d5fb1e21472260.zip
Deploy FAS config for prod IPA
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'roles/fas_server')
-rw-r--r--roles/fas_server/files/ipa.production.pem23
-rw-r--r--roles/fas_server/tasks/main.yml4
2 files changed, 23 insertions, 4 deletions
diff --git a/roles/fas_server/files/ipa.production.pem b/roles/fas_server/files/ipa.production.pem
new file mode 100644
index 000000000..a3e3ad5f9
--- /dev/null
+++ b/roles/fas_server/files/ipa.production.pem
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIIDpDCCAoygAwIBAgIBATANBgkqhkiG9w0BAQsFADA8MRowGAYDVQQKDBFGRURP
+UkFQUk9KRUNULk9SRzEeMBwGA1UEAwwVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4X
+DTE2MTAxMzEzMDQ0NloXDTM2MTAxMzEzMDQ0NlowPDEaMBgGA1UECgwRRkVET1JB
+UFJPSkVDVC5PUkcxHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTCCASIw
+DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLFCPrsPD3YW/yzvId7UsWCq/Ac
+cD7IOtlt46slTa490TvfpwzB1IwA3H0LTEYV7LONMIxJIT8H4H2P7A/S4eDtA6sZ
+s26Qp+3YLj+jHOwvNiONG5YBIn6vgUKc1SdwyuQsNwcGsH1nV2vXrKYz4ccMud1P
+tzzwRMSWgwZLXcLvMMXYpDCxu4pVmgEtTnYz7Dii7MJ2aJsWEuslzjL6HjaegfGD
+JjXCrqmNKcgbgD7fQq05wiYw8AbArjhfObDO626b4naB0VxLb9vGTDBaRbIeL7Or
+nM11BWVqYAFFRZPL1jXkeb9Bpr9oj4PduRq6+tSZPa3wgtnoowAN2AqLHKMCAwEA
+AaOBsDCBrTAfBgNVHSMEGDAWgBQVrijBhrLB6xwkwjZroAlWJGIpvDAPBgNVHRMB
+Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQUFa4owYaywescJMI2
+a6AJViRiKbwwSgYIKwYBBQUHAQEEPjA8MDoGCCsGAQUFBzABhi5odHRwOi8vaXBh
+MDEucGh4Mi5mZWRvcmFwcm9qZWN0Lm9yZzo4MC9jYS9vY3NwMA0GCSqGSIb3DQEB
+CwUAA4IBAQAZE5ZVf2MROtRR2O00ecXwl3vBE72xw87EQdAQ6J9sDjug5YrVW6OU
+OfaRoVLyBSi5uPgj2RZ9VePdGNSDZ66DhspPtmbWcW0M1X2QPXwWQ/Idj3MfKE33
+b+V4A6T55p1kxXniNl0KZHlDVMECltwRBkd9mjr3LgWzk/EgqyiP56xrWEsvKUyv
+ZMvoyFky2/BaNTN8KOposjDQZwR5sqE/CJzm/QJPg/6zQ4/tkFDOc7ZqIVkfIqoY
+sycNYLLakqCV59xuJ2uDbV8Sn8LbH5+e3Px0mapnVxn8fJAPcCqDOmXJ5TVkVYlH
+nYYOskqEw5stHYuEwujR2uXo8vfmIMpZ
+-----END CERTIFICATE-----
+
diff --git a/roles/fas_server/tasks/main.yml b/roles/fas_server/tasks/main.yml
index f41e344a9..61348375a 100644
--- a/roles/fas_server/tasks/main.yml
+++ b/roles/fas_server/tasks/main.yml
@@ -17,7 +17,6 @@
- fas
- name: install needed packages
- when: env == "staging"
yum: pkg={{ item }} state=installed
with_items:
- krb5-workstation
@@ -27,14 +26,12 @@
- fas
- name: configure krb5
- when: env == "staging"
template: src=krb5.conf.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
tags:
- config
- fas
- name: install IPA keytab
- when: env == "staging"
copy: >
src="{{ private }}/files/keytabs/{{env}}/fas_sync"
dest="/etc/fas_sync_keytab"
@@ -46,7 +43,6 @@
- fas
- name: install ipa public cert
- when: env == "staging"
copy: src=ipa.{{env}}.pem dest=/etc/fas_sync_cert.pem owner=root group=root mode=0644
tags:
- config