refs #8025 passbolt create fixes
This commit is contained in:
parent
153493a875
commit
fed934b5db
|
@ -21,4 +21,4 @@ awx_pub_key: >
|
|||
ssh-ed25519
|
||||
AAAAC3NzaC1lZDI1NTE5AAAAIKzAwWm+IsqZCgMzjdZ7Do3xWtVtoUCpWJpH7KSi2a/H
|
||||
awx@verdnatura.es
|
||||
pb_folder: e0d517be-6783-4b97-9742-acaa9b09742f
|
||||
passbolt_folder: e0d517be-6783-4b97-9742-acaa9b09742f
|
||||
|
|
|
@ -1,6 +1,5 @@
|
|||
[all:vars]
|
||||
host_domain=lab.verdnatura.es
|
||||
pb_servers_folder=7007ba58-99a5-44f9-8808-8160137ce232
|
||||
|
||||
[cephlab]
|
||||
cephlab[01:03]
|
||||
|
|
|
@ -1,6 +1,5 @@
|
|||
[all:vars]
|
||||
host_domain=servers.dc.verdnatura.es
|
||||
pb_servers_folder=fe08b909-ee3c-4257-b0b4-e088b16ca379
|
||||
|
||||
[kube_master]
|
||||
kube-master[1:5]
|
||||
|
|
|
@ -3,16 +3,9 @@
|
|||
gather_facts: no
|
||||
tasks:
|
||||
- debug:
|
||||
msg: >
|
||||
{{
|
||||
lookup(passbolt, 'test',
|
||||
username='root',
|
||||
password=pb_password,
|
||||
folder_parent_id=pb_folder
|
||||
)
|
||||
}}
|
||||
msg: "{{ lookup(passbolt, 'test', password=passbolt_password) }}"
|
||||
vars:
|
||||
pb_password: 'S3cR3tP4$$w0rd'
|
||||
passbolt_password: 'S3cR3tP4$$w0rd'
|
||||
environment:
|
||||
PASSBOLT_CREATE_NEW_RESOURCE: true
|
||||
PASSBOLT_NEW_RESOURCE_PASSWORD_LENGTH: 18
|
||||
|
|
|
@ -8,7 +8,7 @@ idle_timelimit 60
|
|||
|
||||
base {{ ldap_base }}
|
||||
binddn cn=nss,ou=admins,{{ ldap_base }}
|
||||
bindpw {{ lookup(passbolt, 'nslcd', folder_parent_id=pb_folder).password }}
|
||||
bindpw {{ lookup(passbolt, 'nslcd', folder_parent_id=passbolt_folder).password }}
|
||||
pagesize 500
|
||||
|
||||
filter group (&(objectClass=posixGroup)(cn={{ sysadmin_group }}))
|
||||
|
|
|
@ -9,13 +9,11 @@
|
|||
lookup(passbolt, inventory_hostname_short,
|
||||
username='root',
|
||||
password=root_password,
|
||||
uri='ssh://'+hostname_fqdn,
|
||||
folder_parent_id=pb_servers_folder
|
||||
uri='ssh://'+hostname_fqdn
|
||||
)
|
||||
}}
|
||||
environment:
|
||||
PASSBOLT_CREATE_NEW_RESOURCE: true
|
||||
when: pb_folder is defined
|
||||
- name: Save the root password to file
|
||||
copy:
|
||||
content: "{{ root_password }}\n"
|
||||
|
@ -23,7 +21,6 @@
|
|||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
when: pb_folder is not defined
|
||||
- name: Change root password
|
||||
user:
|
||||
name: root
|
||||
|
|
Loading…
Reference in New Issue