From bd132e20d4918936000e7d93655ddb582aa04bc7 Mon Sep 17 00:00:00 2001
From: Ade Lee <alee@redhat.com>
Date: Tue, 12 May 2020 16:16:17 -0400
Subject: [PATCH] Add option to not install ipa client packages

In RHEL 8, ansible-freeipa uses RHEL8 modules to determine which
IPA client packages to install.  If the system is not registered,
this fails because the RHEL 8 repos and groups are not available.

Fortunately, the IPA client packages are already in the ovecloud
image.  We add here an option to tell ansible-freeipa not to check
for and install any packages to the overcloud nodes to allow the
client registration to succeed..

Change-Id: I702bc4e5ea44af2e7f6247e5ad85ec41cfb17406
---
 deployment/ipa/ipaservices-baremetal-ansible.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/deployment/ipa/ipaservices-baremetal-ansible.yaml b/deployment/ipa/ipaservices-baremetal-ansible.yaml
index 06e666f949..e0bc7b42d7 100644
--- a/deployment/ipa/ipaservices-baremetal-ansible.yaml
+++ b/deployment/ipa/ipaservices-baremetal-ansible.yaml
@@ -64,6 +64,11 @@ parameters:
     default: True
     description:  Set to true to enroll the base server (computes, controllers)
     type: boolean
+  IdMInstallClientPackages:
+    default: True
+    description: Set to True to have ansible-freeipa install ipa client packages
+                 on the overcloud node.
+    type: boolean
   IdMModifyDNS:
     default: True
     description: Set to false to disable DNS records manipulation in the FreeIPA server.
@@ -128,6 +133,7 @@ outputs:
             ipaclient_force: yes
             ipaclient_servers: {get_param: IdMServer}
             ipaclient_hostname: "{{ fqdn_canonical }}"
+            ipaclient_install_packages: {get_param: IdMInstallClientPackages}
             ipaclients:
               - "{{ inventory_hostname }}"
           block: