import ansible-freeipa-0.1.4-1.el8
This commit is contained in:
commit
7215c2693a
1
.ansible-freeipa.metadata
Normal file
1
.ansible-freeipa.metadata
Normal file
@ -0,0 +1 @@
|
|||||||
|
8b916e74fdfd8cb11b55e401fc752d30b2a6ee09 SOURCES/ansible-freeipa-0.1.4.tar.gz
|
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
SOURCES/ansible-freeipa-0.1.4.tar.gz
|
149
SPECS/ansible-freeipa.spec
Normal file
149
SPECS/ansible-freeipa.spec
Normal file
@ -0,0 +1,149 @@
|
|||||||
|
# Turn off automatic python byte compilation because these are Ansible
|
||||||
|
# roles and the files are transferred to the node and compiled there with
|
||||||
|
# the python verison used in the node
|
||||||
|
%define __brp_python_bytecompile %{nil}
|
||||||
|
|
||||||
|
Summary: Roles and playbooks to deploy FreeIPA servers, replicas and clients
|
||||||
|
Name: ansible-freeipa
|
||||||
|
Version: 0.1.4
|
||||||
|
Release: 1%{?dist}
|
||||||
|
URL: https://github.com/freeipa/ansible-freeipa
|
||||||
|
License: GPLv3+
|
||||||
|
Source: https://github.com/freeipa/ansible-freeipa/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
||||||
|
BuildArch: noarch
|
||||||
|
|
||||||
|
#Requires: ansible
|
||||||
|
|
||||||
|
%description
|
||||||
|
ansible-freeipa provides Ansible roles and playbooks to install and uninstall
|
||||||
|
FreeIPA servers, replicas and clients.
|
||||||
|
|
||||||
|
Note: The ansible playbooks and roles require a configured ansible environment
|
||||||
|
where the ansible nodes are reachable and are properly set up to have an IP
|
||||||
|
address and a working package manager.
|
||||||
|
|
||||||
|
Features
|
||||||
|
|
||||||
|
- Server, replica and client deployment
|
||||||
|
- Cluster deployments: Server, replicas and clients in one playbook
|
||||||
|
- One-time-password (OTP) support for client installation
|
||||||
|
- Repair mode for clients
|
||||||
|
|
||||||
|
Supported FreeIPA Versions
|
||||||
|
|
||||||
|
FreeIPA versions 4.6 and up are supported by all roles.
|
||||||
|
|
||||||
|
The client role supports versions 4.4 and up, the server role is working with
|
||||||
|
versions 4.5 and up, the replica role is currently only working with versions
|
||||||
|
4.6 and up.
|
||||||
|
|
||||||
|
Supported Distributions
|
||||||
|
|
||||||
|
- RHEL/CentOS 7.4+
|
||||||
|
- Fedora 26+
|
||||||
|
- Ubuntu
|
||||||
|
|
||||||
|
Requirements
|
||||||
|
|
||||||
|
Controller
|
||||||
|
- Ansible version: 2.5+
|
||||||
|
- python3-gssapi is required on the controller if a one time password (OTP)
|
||||||
|
is used to install the client.
|
||||||
|
|
||||||
|
Node
|
||||||
|
- Supported FreeIPA version (see above)
|
||||||
|
- Supported distribution (needed for package installation only, see above)
|
||||||
|
|
||||||
|
Limitations
|
||||||
|
|
||||||
|
External CA support is not supported or working. The currently needed two step
|
||||||
|
process is an issue for the processing in the role. The configuration of the
|
||||||
|
server is partly done already and needs to be continued after the CSR has been
|
||||||
|
handled. This is for example breaking the deployment of a server with replicas
|
||||||
|
or clients in one playbook.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q
|
||||||
|
# Fix python modules and module utils:
|
||||||
|
# - Remove shebang
|
||||||
|
# - Remove execute flag
|
||||||
|
for i in roles/ipa*/library/*.py roles/ipa*/module_utils/*.py plugins/*/*.py; do
|
||||||
|
sed -i '/\/usr\/bin\/python*/d' $i
|
||||||
|
chmod a-x $i
|
||||||
|
done
|
||||||
|
# Add execute flag to py3test.py scripts
|
||||||
|
chmod a+x roles/ipa*/files/py3test.py
|
||||||
|
|
||||||
|
%build
|
||||||
|
|
||||||
|
%install
|
||||||
|
install -m 755 -d %{buildroot}%{_datadir}/ansible/roles/
|
||||||
|
cp -rp roles/ipaserver %{buildroot}%{_datadir}/ansible/roles/
|
||||||
|
cp -rp roles/ipaserver/README.md README-server.md
|
||||||
|
cp -rp roles/ipareplica %{buildroot}%{_datadir}/ansible/roles/
|
||||||
|
cp -rp roles/ipareplica/README.md README-replica.md
|
||||||
|
cp -rp roles/ipaclient %{buildroot}%{_datadir}/ansible/roles/
|
||||||
|
cp -rp roles/ipaclient/README.md README-client.md
|
||||||
|
install -m 755 -d %{buildroot}%{_datadir}/ansible/plugins/
|
||||||
|
cp -rp plugins/* %{buildroot}%{_datadir}/ansible/plugins/
|
||||||
|
|
||||||
|
%files
|
||||||
|
%license COPYING
|
||||||
|
%{_datadir}/ansible/roles/ipaserver
|
||||||
|
%{_datadir}/ansible/roles/ipareplica
|
||||||
|
%{_datadir}/ansible/roles/ipaclient
|
||||||
|
%{_datadir}/ansible/plugins/module_utils
|
||||||
|
%{_datadir}/ansible/plugins/modules
|
||||||
|
%doc README.md
|
||||||
|
%doc README-topology.md
|
||||||
|
%doc README-server.md
|
||||||
|
%doc README-replica.md
|
||||||
|
%doc README-client.md
|
||||||
|
%doc playbooks
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.4-1
|
||||||
|
- update to version 0.1.4
|
||||||
|
- ipatopologysegment: Use commands, not command
|
||||||
|
|
||||||
|
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.3-1
|
||||||
|
- update to version 0.1.3
|
||||||
|
- ipaclient_test: Fix Python2 decode use with Python3
|
||||||
|
- Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
|
||||||
|
- ipaclient_get_otp: Remove ansible_python_interpreter handling
|
||||||
|
- ipaclient: Use omit (None) for password, keytab, no string length checks
|
||||||
|
- ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
|
||||||
|
- ipaclient: Report error message if ipaclient_get_otp failed
|
||||||
|
- Fixes #17 Improve how tasks manage package installation
|
||||||
|
- ipareplica: The dm password is not needed for ipareplica_master_password
|
||||||
|
- ipareplica: Use ipareplica_server if set
|
||||||
|
- ipatopologysegment: Allow domain+ca suffix, new state: checked
|
||||||
|
- Documentation updates
|
||||||
|
- Cleanups
|
||||||
|
|
||||||
|
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-3
|
||||||
|
- bump release for functional test
|
||||||
|
|
||||||
|
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-2
|
||||||
|
- bump release for functional test
|
||||||
|
|
||||||
|
* Fri Jun 7 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-1
|
||||||
|
- update to version 0.1.2
|
||||||
|
- Now a new Ansible Collection
|
||||||
|
- Fix gssapi requirement for OTP: It is only needed if keytab is used with
|
||||||
|
OTP now.
|
||||||
|
- Fix wrong ansible argument types
|
||||||
|
- Do not fail on textwrap for replica deployments with CA
|
||||||
|
- Ansible lint and galaxy fixes
|
||||||
|
- Disable automatic removal of replication agreements in uninstall
|
||||||
|
- Enable freeipa-trust service if adtrust is enabled
|
||||||
|
- Add support for hidden replica
|
||||||
|
- New topology managament modules
|
||||||
|
- Add support for pki_config_override
|
||||||
|
- Fix host name setup in server deployment
|
||||||
|
- Fix errors when ipaservers variable is not set
|
||||||
|
- Fix ipaclient install role length typo
|
||||||
|
- Cleanups
|
||||||
|
|
||||||
|
* Mon May 6 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.1-1
|
||||||
|
- Initial package
|
Loading…
Reference in New Issue
Block a user