Add option to not install ipa client packages

In RHEL 8, ansible-freeipa uses RHEL8 modules to determine which
IPA client packages to install.  If the system is not registered,
this fails because the RHEL 8 repos and groups are not available.

Fortunately, the IPA client packages are already in the ovecloud
image.  We add here an option to tell ansible-freeipa not to check
for and install any packages to the overcloud nodes to allow the
client registration to succeed..

Change-Id: I702bc4e5ea44af2e7f6247e5ad85ec41cfb17406
changes/30/727430/1
Ade Lee 2 years ago
parent 12bdcf666a
commit bd132e20d4
  1. 6
      deployment/ipa/ipaservices-baremetal-ansible.yaml

@ -64,6 +64,11 @@ parameters:
default: True
description: Set to true to enroll the base server (computes, controllers)
type: boolean
IdMInstallClientPackages:
default: True
description: Set to True to have ansible-freeipa install ipa client packages
on the overcloud node.
type: boolean
IdMModifyDNS:
default: True
description: Set to false to disable DNS records manipulation in the FreeIPA server.
@ -128,6 +133,7 @@ outputs:
ipaclient_force: yes
ipaclient_servers: {get_param: IdMServer}
ipaclient_hostname: "{{ fqdn_canonical }}"
ipaclient_install_packages: {get_param: IdMInstallClientPackages}
ipaclients:
- "{{ inventory_hostname }}"
block:

Loading…
Cancel
Save