diff --git a/playbooks/config/retrieve-config.yml b/playbooks/config/retrieve-config.yml index 7f05e802e2730a7d6cf83e02dbd1c4f91ed766fc..595c9b1db389942da7c10115e12e55885a629fd8 100644 --- a/playbooks/config/retrieve-config.yml +++ b/playbooks/config/retrieve-config.yml @@ -10,5 +10,6 @@ ipaadmin_password: SomeADMINpassword register: serverconfig - - debug: + - name: Display current configuration. + debug: msg: "{{ serverconfig }}" diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml index 10976de17d346806866ec90f6ee5a0e6de41030c..6c56f1e4cf6dd3a08ad3e692123cc6c9380f628e 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml @@ -5,7 +5,7 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is absent + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword state: absent diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml index 1970432fa9799fbb70ccab76bc9aeecb3505d6ee..92b698cfee2b65758409f7421a650e497d882992 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is present + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword name: example.com forwarders: diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml index c27767b5757a005e531a36dcdbf44c8d5d8e03cb..74d7bc626a45b93fe58a98e87ca415eea1170ce4 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is present with forward port + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword name: example.com forwarders: diff --git a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml index f4dffc66db52d12829279970fe608e4484712bbb..1bdba90c03e9fe689cd0dedf4cb94d122af0ac06 100644 --- a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml +++ b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml @@ -1,12 +1,11 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - name: Ensure that 'host04' has A and AAAA records. + - name: Ensure that 'host04' A and AAAA records are absent. ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: ipatest.local diff --git a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml index b59acfe0fc2cb456b67088c09911774b8befe632..3f7945746184c435e5d324fca8662c919cca97c1 100644 --- a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml +++ b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml @@ -1,12 +1,11 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - name: Ensure that 'host04' has A and AAAA records. + - name: Ensure that 'host04' A and AAAA records are present. ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: ipatest.local diff --git a/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml b/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml index 9b02b14728ab7bdd6d6f2b89d6dac16294d2f586..751fc04321014a5de39da28c2a802db59fb7e785 100644 --- a/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml +++ b/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml @@ -1,12 +1,12 @@ --- -- name: Test CNAME Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that 'host04' has CNAME, with cname_hostname - - ipadnsrecord: + - name: Ensure that 'host04' has CNAME, with cname_hostname, is absent + ipadnsrecord: zone_name: example.com name: host04 cname_hostname: host04.example.com diff --git a/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml b/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml index e6e918c35a072261bc97074d281b70386e40808d..3a0c5b95a53db6902b9b0c6c8c08051a42b31288 100644 --- a/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test CNAME Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that 'host04' has CNAME, with cname_hostname - - ipadnsrecord: + - name: Ensure that 'host04' has CNAME, with cname_hostname, is present + ipadnsrecord: zone_name: example.com name: host04 cname_hostname: host04.example.com diff --git a/playbooks/dnsrecord/ensure-MX-record-is-present.yml b/playbooks/dnsrecord/ensure-MX-record-is-present.yml index 139c168180aa2d2aa7db61d1b0f280b49d4789d4..df21c7acde35369424214d5f85a05678e3decc0b 100644 --- a/playbooks/dnsrecord/ensure-MX-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-MX-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Ensure MX Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure an MX record is absent - - ipadnsrecord: + - name: Ensure an MX record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: '@' record_type: 'MX' diff --git a/playbooks/dnsrecord/ensure-PTR-record-is-present.yml b/playbooks/dnsrecord/ensure-PTR-record-is-present.yml index 0a59c0d29e80116571b279f839c371635ac4aaeb..3a3fc3b923ef0e6f86507370269e6ceb0ca4143b 100644 --- a/playbooks/dnsrecord/ensure-PTR-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-PTR-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - ipadnsrecord: + - name: Ensure a PTR record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: 5 record_type: 'PTR' diff --git a/playbooks/dnsrecord/ensure-SRV-record-is-present.yml b/playbooks/dnsrecord/ensure-SRV-record-is-present.yml index 3c18ff34f909a485217b137d35995f97cb9d68cc..ba00f36a11157a888431f7a072fcf5fd314db062 100644 --- a/playbooks/dnsrecord/ensure-SRV-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-SRV-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test SRV Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SRV record is present - - ipadnsrecord: + - name: Ensure a SRV record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _kerberos._udp.example.com record_type: 'SRV' diff --git a/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml b/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml index 99ec554251a75448fe8cceb311ca118d640395c1..9a902c00bc09c42b3a58e9b6bdccb8331c2fbc48 100644 --- a/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml @@ -1,13 +1,13 @@ --- -- name: Test SSHFP Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SSHFP record is present # SSHFP fingerprint generated with `ssh-keygen -r host04.testzone.local` - - ipadnsrecord: + - name: Ensure a SSHFP record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: example.com name: host04 diff --git a/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml b/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml index 65e947929e35c9dd3ff4e1caa73fe7105dc30b60..fdbe9ad0354fff0ba45369d56529fc3f7407226a 100644 --- a/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test SSHFP Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SSHFP record is present - - ipadnsrecord: + - name: Ensure a TLSA record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: example.com name: host04 diff --git a/playbooks/dnsrecord/ensure-TXT-record-is-present.yml b/playbooks/dnsrecord/ensure-TXT-record-is-present.yml index 35be86e164d80f36bc85dcab5b0e0c729cdf6ef3..0ca8bdc8507c8018f74e29ea6c60ec5d944aa96b 100644 --- a/playbooks/dnsrecord/ensure-TXT-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-TXT-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test TXT Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a TXT record is absent - - ipadnsrecord: + - name: Ensure a TXT record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _kerberos record_type: 'TXT' diff --git a/playbooks/dnsrecord/ensure-URI-record-is-present.yml b/playbooks/dnsrecord/ensure-URI-record-is-present.yml index be1b25df4d0e609ba3dfc72a2631ba4c2e3160fe..c07f24f5b020e15b0604636b48aebbceb3f84317 100644 --- a/playbooks/dnsrecord/ensure-URI-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-URI-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test URI Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a URI record is absent - - ipadnsrecord: + - name: Ensure a URI record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _ftp._tcp record_type: 'URI' diff --git a/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml b/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml index 3cfed05c966c0720fe69c8ae84ca0229bdb5b524..5bbf9ef9625f27796eb2edc0fa642f7ec708f019 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is absent. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is absent - - ipadnsrecord: + - name: Ensure that dns record is absent + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml b/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml index b1ae113dca4241d025e7dad1c732cadc32e11290..132f65f11922f4bda552fd12ac702715dd101761 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is present - - ipadnsrecord: + - name: Ensure that dns record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml b/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml index bef7d33aafceb7c01dbfb2c9e241407d83e0c2ff..dbbf331044a3c06490c3497f069ce7965feab920 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is present - - ipadnsrecord: + - name: Ensure that dns record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-presence-multiple-records.yml b/playbooks/dnsrecord/ensure-presence-multiple-records.yml index 94e01aea7680bb691edc7e2f37b6c2dfcc7e4820..48e32938c40b0a32691333dc84f30c9d715377fb 100644 --- a/playbooks/dnsrecord/ensure-presence-multiple-records.yml +++ b/playbooks/dnsrecord/ensure-presence-multiple-records.yml @@ -1,12 +1,12 @@ --- -- name: Test multiple DNS Records are present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that multiple dns records are present - - ipadnsrecord: + - name: Ensure that multiple dns records are present + ipadnsrecord: ipaadmin_password: SomeADMINpassword records: - name: host01 diff --git a/playbooks/host/host-member-managedby_host-absent.yml b/playbooks/host/host-member-managedby_host-absent.yml index 56ee6818d71c4a5884bd97d40e7ef1a29c69be11..11867775797f9c9d99a8576bc8a515f9b32099a6 100644 --- a/playbooks/host/host-member-managedby_host-absent.yml +++ b/playbooks/host/host-member-managedby_host-absent.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host member managedby_host 'server.example.com' is absent + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/host-member-managedby_host-present.yml b/playbooks/host/host-member-managedby_host-present.yml index 9d27f4cd49be04bdd9b09ff9a8f7aa7495fef372..d62459d1fb40611252cb62ca3bb63acc53f106af 100644 --- a/playbooks/host/host-member-managedby_host-present.yml +++ b/playbooks/host/host-member-managedby_host-present.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host member managedby_host 'server.example.com' is present + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/host-present-with-managedby_host.yml b/playbooks/host/host-present-with-managedby_host.yml index 31adaa1d45cbeb86cdeee96c5d3fcd7d67c725ba..1a54ef99bb5c90d29ee658de6f7466234db7b5c2 100644 --- a/playbooks/host/host-present-with-managedby_host.yml +++ b/playbooks/host/host-present-with-managedby_host.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host is present with managedby_host attribute. + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/hosts-member-managedby_host-present.yml b/playbooks/host/hosts-member-managedby_host-present.yml index b09771ef82f383b91f9eb15b174fefe246038ccf..4c8674021e146e15be3feae5f477e913b0d4323f 100644 --- a/playbooks/host/hosts-member-managedby_host-present.yml +++ b/playbooks/host/hosts-member-managedby_host-present.yml @@ -4,7 +4,7 @@ become: true tasks: - - name: Ensure hosts manadegby_host is absent. + - name: Ensure hosts manadegby_host is present. ipahost: ipaadmin_password: SomeADMINpassword hosts: diff --git a/playbooks/host/hosts-present-with-managedby_host.yml b/playbooks/host/hosts-present-with-managedby_host.yml index 750319ad78beeec3d33f995fb6f0198f2662a4ee..ad04fac83650d26240f78c583bfcaf2cbcbe5f03 100644 --- a/playbooks/host/hosts-present-with-managedby_host.yml +++ b/playbooks/host/hosts-present-with-managedby_host.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure hosts are present with managedby_host attribute. + ipahost: ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com diff --git a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml index c9e37d3f3c91d5a54455fe7f536b6e9e9072f95d..f82fecc9f4492b20daf105b0e6db8456f7c7a109 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure host-group databases is present - - ipahostgroup: + - name: Ensure host-group databases is absent + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases state: absent diff --git a/playbooks/hostgroup/ensure-hostgroup-is-present.yml b/playbooks/hostgroup/ensure-hostgroup-is-present.yml index bc059dbaebbf7193f5d2d891d815a521e8aba360..b4430db5908001053534b51f494befaaee8b389d 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-present.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure host-group databases is present - - ipahostgroup: + - name: Ensure host-group databases is present + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml index b3fbd558a95b6c732ea947057d2d27ed2becafec..fe41c5fd5e1cae584176d23ac845285a6f2fd216 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure hosts and hostgroups are present in existing databases hostgroup - - ipahostgroup: + - name: Ensure hosts and hostgroups are absent in existing databases hostgroup + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml index c103ce927d49793c24a6fddc2b0b416dc204a6aa..7071278358c3edb1e555601aeeea19bc75591fa9 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure hosts and hostgroups are present in existing databases hostgroup - - ipahostgroup: + - name: Ensure hosts and hostgroups are present in existing databases hostgroup + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/role/role-is-absent.yml b/playbooks/role/role-is-absent.yml index d8d88a1d07965ab557dd5292c2f3b85960683991..27151de15dd34ab4f7398e234c11ff3041773863 100644 --- a/playbooks/role/role-is-absent.yml +++ b/playbooks/role/role-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole state: absent diff --git a/playbooks/role/role-is-present.yml b/playbooks/role/role-is-present.yml index 89ae6b61ac0d281435819dede81650ec64488e80..80ecd9df9c8e05207ac195eb6653e3a30a727043 100644 --- a/playbooks/role/role-is-present.yml +++ b/playbooks/role/role-is-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole description: A role in IPA. diff --git a/playbooks/role/role-member-group-absent.yml b/playbooks/role/role-member-group-absent.yml index c4695f9bf7d2b29ed87a6553f38f47646c0af435..cde4f2367e648c1c6eee3eb82aa00aafd7ee0066 100644 --- a/playbooks/role/role-member-group-absent.yml +++ b/playbooks/role/role-member-group-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'group' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole group: diff --git a/playbooks/role/role-member-group-present.yml b/playbooks/role/role-member-group-present.yml index c14c7ec202f1c38dc32a56ec89a173c3fa817de4..ec162142a5dffa0e9b6b7268096de2beb018349c 100644 --- a/playbooks/role/role-member-group-present.yml +++ b/playbooks/role/role-member-group-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'group' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole group: diff --git a/playbooks/role/role-member-host-absent.yml b/playbooks/role/role-member-host-absent.yml index 8acaeb28bc02c41bee20b4c5d5505588db08f0b8..00779195696046b268db6d9564aa6b8f3e288cb7 100644 --- a/playbooks/role/role-member-host-absent.yml +++ b/playbooks/role/role-member-host-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'host' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole host: diff --git a/playbooks/role/role-member-host-present.yml b/playbooks/role/role-member-host-present.yml index 583597970e5c4a7ea9300d7d41527c4745031fb3..69a9396aa239c02b12247e68c2714e8cb87baee4 100644 --- a/playbooks/role/role-member-host-present.yml +++ b/playbooks/role/role-member-host-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'host' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole host: diff --git a/playbooks/role/role-member-hostgroup-absent.yml b/playbooks/role/role-member-hostgroup-absent.yml index ee07f97d205641155eb75550cc7e017577035509..53bec0f34c5d00cc3d3200f88e4370e848a23daa 100644 --- a/playbooks/role/role-member-hostgroup-absent.yml +++ b/playbooks/role/role-member-hostgroup-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'hostgroup' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole hostgroup: diff --git a/playbooks/role/role-member-hostgroup-present.yml b/playbooks/role/role-member-hostgroup-present.yml index 2caf9a2d121da29609636573ce304e937d768e86..7ca7ea8c4957bc6167b97e07b5e2c1c8300bf646 100644 --- a/playbooks/role/role-member-hostgroup-present.yml +++ b/playbooks/role/role-member-hostgroup-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'hostgroup' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole hostgroup: diff --git a/playbooks/role/role-member-privilege-absent.yml b/playbooks/role/role-member-privilege-absent.yml index f60339044d4218f5d3a3aebd018609dd0aed5814..0d18662225dee83bca5d17080b5c789470bea516 100644 --- a/playbooks/role/role-member-privilege-absent.yml +++ b/playbooks/role/role-member-privilege-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'privilege' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole privilege: diff --git a/playbooks/role/role-member-privilege-present.yml b/playbooks/role/role-member-privilege-present.yml index 837e989fb118d78238df3e0fbad2c004eea6cde5..f7f05346e4ea8030d53438996fa91e83bf1809a2 100644 --- a/playbooks/role/role-member-privilege-present.yml +++ b/playbooks/role/role-member-privilege-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'privilege' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole privilege: diff --git a/playbooks/role/role-member-service-absent.yml b/playbooks/role/role-member-service-absent.yml index 595047cf12b7f820cf99c9ccfe866ab8700a1d76..2c5bd8cc00bcdf4f56b957513caf2a12bbaa9809 100644 --- a/playbooks/role/role-member-service-absent.yml +++ b/playbooks/role/role-member-service-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'service' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: testrole service: diff --git a/playbooks/role/role-member-service-present.yml b/playbooks/role/role-member-service-present.yml index 98dc9bea430ebe1f367b9c57617c3d7a538aff1b..505c44a97abcab3b426756e7a23612ffe1a344af 100644 --- a/playbooks/role/role-member-service-present.yml +++ b/playbooks/role/role-member-service-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'service' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole service: diff --git a/playbooks/role/role-member-user-absent.yml b/playbooks/role/role-member-user-absent.yml index 3efda216d18bd5c9fe754f4a40df113822c29996..8425d5f482ad5242887b6fa4fad1d0c1386ff596 100644 --- a/playbooks/role/role-member-user-absent.yml +++ b/playbooks/role/role-member-user-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'user' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-member-user-present.yml b/playbooks/role/role-member-user-present.yml index 02a39be86c109135b402c32d1f1864e0ae4d817f..bee5f0d1c0909e324cb79d0735074a0afe76279c 100644 --- a/playbooks/role/role-member-user-present.yml +++ b/playbooks/role/role-member-user-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'user' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-members-absent.yml b/playbooks/role/role-members-absent.yml index aedd81cb88b9b37ecb8111427af4ba3f0fb66300..6b34abf37856ae8ee4c8f97e26f7276c55aeb5d1 100644 --- a/playbooks/role/role-members-absent.yml +++ b/playbooks/role/role-members-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role members are absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-members-present.yml b/playbooks/role/role-members-present.yml index d659c1f57ded11ff2f9bc05e322a43e1c1c7d681..aa3ca51a37bf0bd5c7013fc247578e3e46d56fb9 100644 --- a/playbooks/role/role-members-present.yml +++ b/playbooks/role/role-members-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role members are present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: @@ -21,3 +22,4 @@ - User Administrators service: - service01 + action: member diff --git a/playbooks/role/role-rename.yml b/playbooks/role/role-rename.yml index 9d078f5294060e9781583fb9246dc09d173c862a..9e53969d8943ac33460fd2ee5664547194455871 100644 --- a/playbooks/role/role-rename.yml +++ b/playbooks/role/role-rename.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Rename role. + iparole: ipaadmin_password: SomeADMINpassword name: somerole rename: anotherrole diff --git a/playbooks/service/service-host-is-absent.yml b/playbooks/service/service-host-is-absent.yml index 5b3fbcbb75714b9b134399b7dc1587f135985d18..a6e4a376e55273e7c33f40297e44dbb109bc1879 100644 --- a/playbooks/service/service-host-is-absent.yml +++ b/playbooks/service/service-host-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure management host is absent. - - ipaservice: + - name: Ensure management host is absent. + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com host: "{{ groups.ipaserver[0] }}" diff --git a/playbooks/service/service-host-is-present.yml b/playbooks/service/service-host-is-present.yml index 46f5bb6f245745fbf9c2f521ba88c8f4df0084a0..28180667e51afb7d7f3114a15c3dc4bb1459626f 100644 --- a/playbooks/service/service-host-is-present.yml +++ b/playbooks/service/service-host-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure management host is present. - - ipaservice: + - name: Ensure management host is present. + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com host: "{{ groups.ipaserver[0] }}" diff --git a/playbooks/service/service-is-absent.yml b/playbooks/service/service-is-absent.yml index 7fd138c092f0d0a0cb1e4ddcd127d86ea3b61dda..8054908ce9966c4ba8a10d1390a334e93dc8c0b2 100644 --- a/playbooks/service/service-is-absent.yml +++ b/playbooks/service/service-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is absent - - ipaservice: + - name: Ensure service is absent + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com state: absent diff --git a/playbooks/service/service-is-disabled.yml b/playbooks/service/service-is-disabled.yml index b21e19298b833646353e708e411814068c4a3aae..893669e28add74811973503b9ac96479c6f9b6cf 100644 --- a/playbooks/service/service-is-disabled.yml +++ b/playbooks/service/service-is-disabled.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is disabled - - ipaservice: + - name: Ensure service is disabled + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com state: disabled diff --git a/playbooks/service/service-is-present-with-all-attributes.yml b/playbooks/service/service-is-present-with-all-attributes.yml index a7494cc8668e76ee12fd5cc0d413a84da3d8f36c..da6b9ca530ba47b915313f6a4092dc504588ed3f 100644 --- a/playbooks/service/service-is-present-with-all-attributes.yml +++ b/playbooks/service/service-is-present-with-all-attributes.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com certificate: diff --git a/playbooks/service/service-is-present-with-host-force.yml b/playbooks/service/service-is-present-with-host-force.yml index a02fa7c2461d0a6d9dc91eeada2b67395a447bc2..aa0ab8e03ae06ba879abf3083e7936c9b8991a5a 100644 --- a/playbooks/service/service-is-present-with-host-force.yml +++ b/playbooks/service/service-is-present-with-host-force.yml @@ -5,9 +5,8 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/ihavenodns.info force: yes - # state: absent diff --git a/playbooks/service/service-is-present-without-host-object.yml b/playbooks/service/service-is-present-without-host-object.yml index 2496177a16d59db7baf5b1043240eae470ce0070..4c3c4edd6294bf7602169998acf9d673972e8347 100644 --- a/playbooks/service/service-is-present-without-host-object.yml +++ b/playbooks/service/service-is-present-without-host-object.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.ansible.com skip_host_check: yes diff --git a/playbooks/service/service-is-present.yml b/playbooks/service/service-is-present.yml index e2c492741e3708b064cfe1090e498e771b026b87..18c8625571429eececfe03b01d3d2b39124ee031 100644 --- a/playbooks/service/service-is-present.yml +++ b/playbooks/service/service-is-present.yml @@ -5,7 +5,7 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com diff --git a/playbooks/service/service-member-certificate-absent.yml b/playbooks/service/service-member-certificate-absent.yml index bb4092b91ce6e3361f2d54dab06d7bf9190a46ce..886365f685cbb3dd4ba5eff9e7f1edb1bb671725 100644 --- a/playbooks/service/service-member-certificate-absent.yml +++ b/playbooks/service/service-member-certificate-absent.yml @@ -5,11 +5,10 @@ gather_facts: false tasks: - # Ensure service certificate is absent - - ipaservice: + - name: Ensure service certificate is absent + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com - certificate: - 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 action: member diff --git a/playbooks/service/service-member-certificate-present.yml b/playbooks/service/service-member-certificate-present.yml index 025d0aa3f23b3bedc7889fcea6ae4f6ebf36f8f8..c8eb4ceab1b2cc1ea80709d11f47eee7eb6a3e4d 100644 --- a/playbooks/service/service-member-certificate-present.yml +++ b/playbooks/service/service-member-certificate-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service certificate is present - - ipaservice: + - name: Ensure service certificate is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com certificate: diff --git a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml index 3539ed00372d5efcb39aa0e4ae128f12970e688b..16ebbf4c10695f0d91de4ca5119c8eeb073d5c4d 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudo command is absent - - ipasudocmd: + - name: Ensure sudo command is absent + ipasudocmd: ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent diff --git a/playbooks/sudocmd/ensure-sudocmd-is-present.yml b/playbooks/sudocmd/ensure-sudocmd-is-present.yml index d648de54282f6c7c5e98e554253e661fb4b27049..c11b5b0dabca057968b1a4dfaf5cb9775708dd5c 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-present.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudo command is present - - ipasudocmd: + - name: Ensure sudo command is present + ipasudocmd: ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml index 49ba2d5a5cce63aae1de8d448d470cdf9d38d860..b75be51a8f134faff65e74052f4188ea06b879e7 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudocmds are absent in sudocmdgroup - - ipasudocmdgroup: + - name: Ensure sudocmds are absent in sudocmdgroup + ipasudocmdgroup: ipaadmin_password: SomeADMINpassword name: network sudocmd: diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml index fe9ab207541ff5e43cdd085df2ed5e35471f9c91..4e511d21495d435f47533180c0ec466be0fa47d0 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml @@ -4,16 +4,16 @@ become: true tasks: - # Ensure sudo commands are present - - ipasudocmd: - ipaadmin_password: SomeADMINpassword - name: - - /usr/sbin/ifconfig - - /usr/sbin/iwlist - state: present + - name: Ensure sudo commands are present + ipasudocmd: + ipaadmin_password: SomeADMINpassword + name: + - /usr/sbin/ifconfig + - /usr/sbin/iwlist + state: present - # Ensure sudo commands are present in existing sudocmdgroup - - ipasudocmdgroup: + - name: Ensure sudocmdgroup is present with sudo commands. + ipasudocmdgroup: ipaadmin_password: SomeADMINpassword name: network sudocmd: diff --git a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml index 7674e5decfd9d8fe0584777e6aed8872fff6b585..338dad71909da4044d47636e78337fcd5cbb200b 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml @@ -4,9 +4,9 @@ become: true tasks: - # Ensure sudocmdgroup is absent - - ipasudocmdgroup: - ipaadmin_password: pass1234 - name: network - state: absent - action: sudocmdgroup + - name: Ensure sudocmdgroup is absent + ipasudocmdgroup: + ipaadmin_password: pass1234 + name: network + state: absent + action: sudocmdgroup diff --git a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml index 6809080c93a689eec29dc9c6ee56f50a73a3056f..e97162cd8da7db87c91ba8ad7a9c890135a29727 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudocmdgroup sudocmds are present - - ipasudocmdgroup: + - name: Ensure sudocmdgroup sudocmds are present + ipasudocmdgroup: ipaadmin_password: pass1234 name: network description: Group of important commands. diff --git a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml index b48a710d96406e83c3f5f0dce1d2a97e7883f4a6..2be625db87c66c80d11a170b422f6864f592b752 100644 --- a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudooption is absent in sudorule - - ipasudorule: + - name: Ensure sudooption '!root' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" diff --git a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml index d1a394cfa93e7c51ade1b2e7180f202829362bce..8334ac3e0b6f959d3c0a8871b17598ea8eea987e 100644 --- a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudooption is present in sudorule - - ipasudorule: + - name: Ensure sudooption '!root' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml index 2f0655c56ef96cff65a695844e855e7b1856dc71..4fb16521b57693e4c9bc0f4d308dded37c358bd9 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure host server is absent in Sudo Rule - - ipasudorule: + - name: Ensure host 'server' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 host: server diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml index e0ce73de8f2b4a7bc78d4bf3b2907f66c69d9ed5..1b4fa47b4d58a7232df51bf579ba2b6a88a35468 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure host server is present in Sudo Rule - - ipasudorule: + - name: Ensure host 'server' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 host: server diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml index c30d63a0a99667d6dcacd769509a7db058683fc8..020eead15124591652945e21fafc834bb1e31b69 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure hostgroup cluster is absent in Sudo Rule - - ipasudorule: + - name: Ensure hostgroup 'cluster' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml index 4813213b6caf9512028a0603a45c2ec26ff5a539..4e14ac8d9e6b7e0ccd84f3e848c479736c1bd2ff 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure hostgrep cluster is present in Sudo Rule - - ipasudorule: + - name: Ensure hostgroup 'cluster' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster diff --git a/playbooks/sudorule/ensure-sudorule-is-absent.yml b/playbooks/sudorule/ensure-sudorule-is-absent.yml index 4b87902c9784f3ff1ee82ad7e5b14fd6290b2733..774ab75ed0fb3f2e1e5d5cd1d189c71cb6b2ded9 100644 --- a/playbooks/sudorule/ensure-sudorule-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is absent - - ipasudorule: + - name: Ensure sudorule command is absent + ipasudorule: ipaadmin_password: pass1234 name: testrule1 state: absent diff --git a/playbooks/sudorule/ensure-sudorule-is-disabled.yml b/playbooks/sudorule/ensure-sudorule-is-disabled.yml index b51da11875470a2a9ec7fa72f3b40b26f57e880e..b96406e7c99d34a1474ac889f6fddf6b038b962a 100644 --- a/playbooks/sudorule/ensure-sudorule-is-disabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-disabled.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is disabled - - ipasudorule: + - name: Ensure sudorule command is disabled + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 state: disabled diff --git a/playbooks/sudorule/ensure-sudorule-is-enabled.yml b/playbooks/sudorule/ensure-sudorule-is-enabled.yml index 4cba3bec35666366ba805650575dd55045e89dfc..6a2cddff942c238114a6d69297701feda4e9ffe2 100644 --- a/playbooks/sudorule/ensure-sudorule-is-enabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-enabled.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is enabled - - ipasudorule: + - name: Ensure sudorule command is enabled + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 state: enabled diff --git a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml index b884886e6e820b74d56135dd57921999b254c436..0c9d49e70bed144772944c673517a56c80ec180c 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule is present with the given order. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 order: 2 diff --git a/playbooks/sudorule/ensure-sudorule-is-present.yml b/playbooks/sudorule/ensure-sudorule-is-present.yml index e88017cf79b917b4da48d2bce20e233cbbe72f54..7d036337fff944afc6e71c9870cfedc4c47365c1 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is present - - ipasudorule: + - name: Ensure sudorule command is present + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 description: A test sudo rule. diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml index 465f386c003db861d75a6188a3b08301243fbdbe..fb25365f195fb18de1a0ecd1d39bfb44ed9bb841 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule 'runasuser' member 'admin' is absent. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml index 4a5bee941862c2f6a82b7461cda0191f29349f3b..00cbfe065377b59b4746faef8c3ef4b076871e10 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule 'runasuser' member 'admin' is present. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml index 3ded226ec774fb77451bd8a8a3079200ccabd4e6..91c717dbd8ea0db1ba4df6893a2cb4b8acd4ddde 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipasudorule: + - name: Ensure sudorule members are absent. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml index 23dd56de84797fc85ab94020e5b530a29914288f..f67c930c6cf369901539e4b0c37a682d1729e4a5 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipasudorule: + - name: Ensure sudorule members are present. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: diff --git a/playbooks/vault/data-archive-in-asymmetric-vault.yml b/playbooks/vault/data-archive-in-asymmetric-vault.yml index 5fd55dfe3115088e8a4cd89e7fcda561f63b5cf5..e05126c29f8fa73eb272f78b018dd46be62d812a 100644 --- a/playbooks/vault/data-archive-in-asymmetric-vault.yml +++ b/playbooks/vault/data-archive-in-asymmetric-vault.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Archive data into asymmetric vault. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: user01 diff --git a/playbooks/vault/data-archive-in-symmetric-vault.yml b/playbooks/vault/data-archive-in-symmetric-vault.yml index 3d4ae99fa91b904028e993d8b88ae0dc2a852c84..b2a5e25f5f7ec0753504643cde8c409053eddca1 100644 --- a/playbooks/vault/data-archive-in-symmetric-vault.yml +++ b/playbooks/vault/data-archive-in-symmetric-vault.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Archieve data into symmetric vault. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-asymetric-vault-is-absent.yml b/playbooks/vault/ensure-asymetric-vault-is-absent.yml index 7ee6cf39401de1b9eebf9644c62fbbfdbb7178f1..fc6d2fb3caf336927b43901ec0720038bea46910 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure asymmetric vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin diff --git a/playbooks/vault/ensure-asymetric-vault-is-present.yml b/playbooks/vault/ensure-asymetric-vault-is-present.yml index 247f36fce1cbd4b766a6a69e5a8753639550c573..467b5553171771b31edafe58b41a85e2de0d4cf1 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-present.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure asymmetric vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin diff --git a/playbooks/vault/ensure-service-vault-is-absent.yml b/playbooks/vault/ensure-service-vault-is-absent.yml index 65c4c8d816d93b5b966ebc94bd03f3b005d7ab95..6643567071fea43f0b31464b19d8929e8756ea16 100644 --- a/playbooks/vault/ensure-service-vault-is-absent.yml +++ b/playbooks/vault/ensure-service-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure service vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" diff --git a/playbooks/vault/ensure-service-vault-is-present.yml b/playbooks/vault/ensure-service-vault-is-present.yml index cf6da2236d075f0ca27c1bedcfa023e54a8cfe99..a77739ed6ac3ad7897c447d68959b37bb89b17d1 100644 --- a/playbooks/vault/ensure-service-vault-is-present.yml +++ b/playbooks/vault/ensure-service-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure service vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" diff --git a/playbooks/vault/ensure-shared-vault-is-absent.yml b/playbooks/vault/ensure-shared-vault-is-absent.yml index 0191ab1c3bfa5bd75e335f7873b91b7f1aaa5010..c54506ac5d46b597773fb14c2812fc1e174a38a4 100644 --- a/playbooks/vault/ensure-shared-vault-is-absent.yml +++ b/playbooks/vault/ensure-shared-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure shared vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: sharedvault shared: True diff --git a/playbooks/vault/ensure-shared-vault-is-present.yml b/playbooks/vault/ensure-shared-vault-is-present.yml index c403afccce3bfde96fedc2e3b102d35a52f1e1c5..d47f84e1c10715f9bcd56a7eeb432fe6a1c3a236 100644 --- a/playbooks/vault/ensure-shared-vault-is-present.yml +++ b/playbooks/vault/ensure-shared-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure shared vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: sharedvault shared: True diff --git a/playbooks/vault/ensure-standard-vault-is-absent.yml b/playbooks/vault/ensure-standard-vault-is-absent.yml index 3d7cd8abeb9dc398f86017d247aaa9ebc07d15e3..9510eb23ffa57f510a608e9a05f76d9cd27ddae5 100644 --- a/playbooks/vault/ensure-standard-vault-is-absent.yml +++ b/playbooks/vault/ensure-standard-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault username: admin diff --git a/playbooks/vault/ensure-standard-vault-is-present.yml b/playbooks/vault/ensure-standard-vault-is-present.yml index 64d08fec65225f8d30601b0f62afce253558ce71..c0e5f3da0990cf2a1ced1b846aec24d196f2fc04 100644 --- a/playbooks/vault/ensure-standard-vault-is-present.yml +++ b/playbooks/vault/ensure-standard-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure standard vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard diff --git a/playbooks/vault/ensure-symetric-vault-is-absent.yml b/playbooks/vault/ensure-symetric-vault-is-absent.yml index a0d5bbcda3c1571bc14ace2ad7387df68a9ec273..d8c0db620645cbfdaea8eedcdb08fcf087c3208d 100644 --- a/playbooks/vault/ensure-symetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-symetric-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure symmetric vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-symetric-vault-is-present.yml b/playbooks/vault/ensure-symetric-vault-is-present.yml index 2418ced822e52148ba18e260566ae931fd1da6da..8f7e0fb4d10dbca74f6123ad8ca0e0540948c55e 100644 --- a/playbooks/vault/ensure-symetric-vault-is-present.yml +++ b/playbooks/vault/ensure-symetric-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure symmetric vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-vault-is-present-with-members.yml b/playbooks/vault/ensure-vault-is-present-with-members.yml index ba96ad14e9a301a0c1aa895edddd77bfe8c84e69..c837b74b0172a1f0d1e8a2f217f32f3c22882ffe 100644 --- a/playbooks/vault/ensure-vault-is-present-with-members.yml +++ b/playbooks/vault/ensure-vault-is-present-with-members.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault is present, with members. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard diff --git a/playbooks/vault/ensure-vault-member-group-is-absent.yml b/playbooks/vault/ensure-vault-member-group-is-absent.yml index c5e7f7d5780874fe7bbcf1ddd4fa37f4a00df7a9..2df3dc618be395b92475fc43f3937b36a66472c5 100644 --- a/playbooks/vault/ensure-vault-member-group-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-group-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "group" is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-group-is-present.yml b/playbooks/vault/ensure-vault-member-group-is-present.yml index 12b52613ad0e5b57560b6b0ff971ca6533baf9f6..eb368d8a32c7433078d076e7297dbf755871bb59 100644 --- a/playbooks/vault/ensure-vault-member-group-is-present.yml +++ b/playbooks/vault/ensure-vault-member-group-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "group" is present. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-user-is-absent.yml b/playbooks/vault/ensure-vault-member-user-is-absent.yml index 7d0578a62307384483e6bb42ee311de3545afdfe..daf3b69303a3054ceda295f79192c6f6b439b928 100644 --- a/playbooks/vault/ensure-vault-member-user-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-user-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "user" is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-user-is-present.yml b/playbooks/vault/ensure-vault-member-user-is-present.yml index a04e6e209ac13dbc3de1ecfcb1683f260256a545..d1a6cf37292b13e21b0b194e87a890097c190f7c 100644 --- a/playbooks/vault/ensure-vault-member-user-is-present.yml +++ b/playbooks/vault/ensure-vault-member-user-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "user" is present. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-owner-is-absent.yml b/playbooks/vault/ensure-vault-owner-is-absent.yml index 817a324b43795ac58534b4bfa00bc21f4aa49fb2..2807c08c953b5954d44c9859a1f408436cfbf384 100644 --- a/playbooks/vault/ensure-vault-owner-is-absent.yml +++ b/playbooks/vault/ensure-vault-owner-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault owners and ownergroups are absent. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-vault-owner-is-present.yml b/playbooks/vault/ensure-vault-owner-is-present.yml index 7c4cfb200746e50f7d38cfed03ad4b43e0cef949..31aba300deea2992b739b0de0b4dd0829ca09087 100644 --- a/playbooks/vault/ensure-vault-owner-is-present.yml +++ b/playbooks/vault/ensure-vault-owner-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault owners and ownergroups are present. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/retrive-data-asymmetric-vault.yml b/playbooks/vault/retrive-data-asymmetric-vault.yml index 0bda412de8f2dc69790cc2c21b9a74fb0f0b220c..35472d20addde667bd1011b289422e79bd818d13 100644 --- a/playbooks/vault/retrive-data-asymmetric-vault.yml +++ b/playbooks/vault/retrive-data-asymmetric-vault.yml @@ -14,5 +14,6 @@ state: retrieved register: result no_log: true - - debug: - msg: "Data: {{ result.vault.data }}" + - name: Display retrieved data. + debug: + msg: "Data: {{ result.vault.data }}" diff --git a/playbooks/vault/retrive-data-symmetric-vault.yml b/playbooks/vault/retrive-data-symmetric-vault.yml index 609c5f5d7a2238ca5096df73844eab9a78624e26..98902a1bcb4f44d2ee8d666555476340fe9eaf7f 100644 --- a/playbooks/vault/retrive-data-symmetric-vault.yml +++ b/playbooks/vault/retrive-data-symmetric-vault.yml @@ -14,5 +14,6 @@ state: retrieved register: result no_log: true - - debug: - msg: "{{ result.vault.data }}" + - name: Display retrieved data. + debug: + msg: "Data: {{ result.vault.data }}" diff --git a/playbooks/vault/vault-is-present-with-password-file.yml b/playbooks/vault/vault-is-present-with-password-file.yml index bedb75dfea5b31f37d84f1b85ff4ab3f600dea8a..c92e2a6bfcd7ba93429ddad589817776ab416eaa 100644 --- a/playbooks/vault/vault-is-present-with-password-file.yml +++ b/playbooks/vault/vault-is-present-with-password-file.yml @@ -5,18 +5,21 @@ gather_facts: True tasks: - - copy: + - name: Copy file containing password to server. + copy: src: "{{ playbook_dir }}/password.txt" dest: "{{ ansible_facts['env'].HOME }}/password.txt" owner: "{{ ansible_user }}" group: "{{ ansible_user }}" mode: 0600 - - ipavault: + - name: Ensure symmetric vault exists with password from file. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_type: symmetric vault_password_file: "{{ ansible_facts['env'].HOME }}/password.txt" - - file: + - name: Remove file containing password from server. + file: path: "{{ ansible_facts['env'].HOME }}/password.txt" state: absent diff --git a/playbooks/vault/vault-is-present-with-public-key-file.yml b/playbooks/vault/vault-is-present-with-public-key-file.yml index 5d7eda02ddba3a172de697d73143ed914d3ecf8c..cd1e7597cf1b8d0d6ac09772bc76023cf19d54a1 100644 --- a/playbooks/vault/vault-is-present-with-public-key-file.yml +++ b/playbooks/vault/vault-is-present-with-public-key-file.yml @@ -10,18 +10,21 @@ gather_facts: True tasks: - - copy: + - name: Copy public key file to server. + copy: src: "{{ playbook_dir }}/public.pem" dest: "{{ ansible_facts['env'].HOME }}/public.pem" owner: "{{ ansible_user }}" group: "{{ ansible_user }}" mode: 0600 - - ipavault: + - name: Ensure asymmetric vault exists with public key from file. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin vault_type: asymmetric vault_public_key_file: "{{ ansible_facts['env'].HOME }}/public.pem" - - file: + - name: Remove public key file from server. + file: path: "{{ ansible_facts['env'].HOME }}/public.pem" state: absent