Bladeren bron

Update main.yml

Signed-off-by: abhishek-sa1 <abhishek.sa3@dell.com>
abhishek-sa1 3 jaren geleden
bovenliggende
commit
faa8b085e0
1 gewijzigde bestanden met toevoegingen van 22 en 19 verwijderingen
  1. 22 19
      control_plane/roles/control_plane_security/tasks/main.yml

+ 22 - 19
control_plane/roles/control_plane_security/tasks/main.yml

@@ -14,29 +14,32 @@
 ---
 ---
 
 
 - block:
 - block:
-    - name: Check freeipa installed or not
-      include_tasks: check_prerequisites.yml
-
     - block:
     - block:
-        - name: Add ports of manager and login node to firewall
-          include_tasks: firewall_settings.yml
+        - name: Check freeipa installed or not
+          include_tasks: check_prerequisites.yml
+
+        - block:
+            - name: Add ports of manager and login node to firewall
+              include_tasks: firewall_settings.yml
 
 
-        - name: Enable module idm in Rocky or Centos >= 8.0
-          include_tasks: enable_dnf_module.yml
+            - name: Enable module idm
+              include_tasks: enable_dnf_module.yml
 
 
-        - name: Install required packages
-          include_tasks: install_packages.yml
+            - name: Install required packages
+              include_tasks: install_packages.yml
 
 
-        - name: Install FreeIPA server
-          include_tasks: install_ipa_server.yml
-      when: not freeipa_status
-    
-    - name: FreeIPA configuration
-      include_tasks: ipa_configuration.yml
+            - name: Install FreeIPA server
+              include_tasks: install_ipa_server.yml
+          when: not freeipa_status
+        
+        - name: FreeIPA configuration
+          include_tasks: ipa_configuration.yml
+      when: os_supported_leap not in mgmt_os
 
 
     - name: Session timeout configuration
     - name: Session timeout configuration
       include_tasks: session_timeout.yml
       include_tasks: session_timeout.yml
-  when: 
-    - enable_security_support
-    - ( os_supported_centos in mgmt_os ) or
-      ( os_supported_rocky in mgmt_os )
+
+    - name: Alert configuration
+      include_tasks: configure_alerting.yml
+      when: alert_email_address | length > 1
+  when: enable_security_support