sr2/ansible-collection-core
4
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

feat(baseline): move freeipa related lockdown overrides to role from playbook
Some checks failed
Ansible Lint Check / lint (push) Failing after 57s
Details

Browse source
This commit is contained in:
Iain Learmonth 2025-11-08 21:00:18 +00:00
parent ec972f9470
commit 78aad663e6
2 changed files with 8 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/baseline/tasks/lockdown.yml
View file

@ -22,4 +22,12 @@
rhel9cis_syslog: rsyslog
rhel9cis_time_synchronization_servers: "{{ baseline_ntp_servers }}"
rhel9cis_warning_banner: "{{ baseline_warning_banner }}"
rhel9cis_autofs_services: true # TODO: can we mask it? This is required by FreeIPA but we don't use it.
# 2.2 Configure Client Services
# These services are required by FreeIPA.
rhel9cis_openldap_clients_required: true
# 5.3.2 Configure authselect
# ipaservers are part of Linux Identity Management. Joining your host to an IdM
# domain automatically configures SSSD authentication on your host.
rhel9cis_allow_authselect_updates: false
when: (ansible_distribution == "Rocky") and (ansible_distribution_major_version == "9")