kerberos-client: remove kstart requirement on CentOS
All our AFS release roles use "kinit" for authentication. The only scripts using k5start are the mirror scripts, but since that doesn't run on CentOS we don't need it there. This avoids us having to use EPEL or, on 8, an unsupported build. Anything needing to be portable should use kinit from now on. Change-Id: I6323cb835cedf9974cf8d96faa7eb55b8aaafd9a
This commit is contained in:
parent
e038eccbc3
commit
5b09e09c60
@ -1,5 +1,8 @@
|
|||||||
An ansible role to configure a kerberos client
|
An ansible role to configure a kerberos client
|
||||||
|
|
||||||
|
Note ```k5start`` is installed on Debuntu distributions, but is not
|
||||||
|
part of RedHat distributions.
|
||||||
|
|
||||||
**Role Variables**
|
**Role Variables**
|
||||||
|
|
||||||
.. zuul:rolevar:: kerberos_realm
|
.. zuul:rolevar:: kerberos_realm
|
||||||
|
@ -1,26 +0,0 @@
|
|||||||
- name: Ensure EPEL is pre-installed
|
|
||||||
package:
|
|
||||||
name:
|
|
||||||
- epel-release
|
|
||||||
state: present
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
# Until in EPEL8; see:
|
|
||||||
# https://bugzilla.redhat.com/show_bug.cgi?id=1791168
|
|
||||||
- name: Install kstart copr repo for CentOS8
|
|
||||||
command: dnf copr enable -y iwienand/kstart
|
|
||||||
become: yes
|
|
||||||
when: ansible_distribution_major_version == '8'
|
|
||||||
|
|
||||||
- name: Install kerberos client packages
|
|
||||||
yum:
|
|
||||||
name: '{{ kerberos_client_packages }}'
|
|
||||||
enablerepo: epel
|
|
||||||
state: present
|
|
||||||
become: yes
|
|
||||||
|
|
||||||
- name: Remove kstart copr repo for CentOS8
|
|
||||||
command: dnf copr remove -y iwienand/kstart
|
|
||||||
become: yes
|
|
||||||
when: ansible_distribution_major_version == '8'
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
|||||||
- name: Install kerberos client packages
|
|
||||||
package:
|
|
||||||
name: '{{ kerberos_client_packages }}'
|
|
||||||
state: present
|
|
||||||
become: yes
|
|
@ -24,16 +24,8 @@
|
|||||||
src: etc/krb5.conf.j2
|
src: etc/krb5.conf.j2
|
||||||
become: yes
|
become: yes
|
||||||
|
|
||||||
# NOTE(ianw): urgh, we have to install with yum directly to enable
|
- name: Install kerberos client packages
|
||||||
# epel on CentOS for kstart, which is a pretty hard dependency for
|
package:
|
||||||
# useful automation. If this ever changes, remove this and we can
|
name: '{{ kerberos_client_packages }}'
|
||||||
# just go back to generic package: installer.
|
state: present
|
||||||
- name: Distro install kerberos client packages
|
become: yes
|
||||||
include_tasks: "{{ lookup('first_found', params) }}"
|
|
||||||
vars:
|
|
||||||
params:
|
|
||||||
files:
|
|
||||||
- "{{ ansible_distribution }}.yaml"
|
|
||||||
- "default.yaml"
|
|
||||||
paths:
|
|
||||||
- install-packages
|
|
||||||
|
@ -1,3 +1,2 @@
|
|||||||
kerberos_client_packages:
|
kerberos_client_packages:
|
||||||
- krb5-workstation
|
- krb5-workstation
|
||||||
- kstart
|
|
||||||
|
Loading…
Reference in New Issue
Block a user