History

Ronelle Landy d4f5c79a13 Revert "Temporarily freeze openssl"

This reverts commit 8175a19fd9e4cccd36c5ede80906023da0f43ee6.
This also reverts change:
I3b1345ac6cacf04ad0903dfb7c6c95622a129cae.

Reason for revert: openssl version is now 1:3.0.1-33.el9

Depends-On: https://review.opendev.org/c/openstack/tripleo-quickstart/+/846194/
Change-Id: I0dd8bfe1d13181cb7ab2a2a95bf28ebefaa6ff3a

2022-06-16 22:03:03 +00:00

defaults

consolidate variable undercloud_enable_novajoin to common

2020-09-26 23:48:50 +00:00

README.md

FreeIPA Setup

An Ansible role to setup a FreeIPA server

Requirements

This role requires a running host to deploy FreeIPA

Role Variables

freeipa_hostname: <'ipa.tripleodomain'> -- Hostname for the FreeIPA server
freeipa_ip: <'192.168.24.250'> -- IP for the FreeIPA server
directory_manager_password: -- Password for the directory manager
freeipa_admin_password: -- FreeIPA server admin password
undercloud_fqdn: <'undercloud.tripleodomain'> -- FQDN for the undercloud
provisioning_cidr: <'{{ freeipa_ip }}/24'> -- If set, it adds the given CIDR to the provisioning interface (which is hardcoded to eth1)
supplemental_user: The user which is used to deploy FreeIpa on the supplemental node
ipa_server_install_params: <''> -- Additional parameters to pass to the ipa-server-install command
prepare_ipa: If set to true, it will install novajoin or tripleo-ipa in the undercloud, and run a script that will create the required privileges/permissions in FreeIPA, as well as the undercloud host entry. This requires 'enable_tls_everywhere' to be set to true, and the following variables to be properly defined: 'freeipa_admin_password', 'freeipa_server_hostname', 'overcloud_cloud_domain', 'undercloud_undercloud_hostname'. If you plan to do this yourself, you can set this variable to false. Defaults to true.
undercloud_enable_novajoin: <'true'> -- uses old novajoin service to register overcloud nodes into IPA when 'enable_tls_everywhere' is enabled.

Example Playbook

Sample playbook to call the role

# Deploy the FreeIPA Server
- name:  Deploy FreeIPA
  hosts: freeipa_host
  gather_facts: false
  roles:
    - freeipa-setup