Update FreeIPA client and server roles (#158)

* Add step to disable nm-cloud-setup during freeipa client install
* Update freeipa.ansible_freeipa collection version
* Change selinux module to use posix collection

Signed-off-by: Jim Enright <jenright@cloudera.com>

Author: jimright

README.md

@@ -117,7 +117,7 @@ See the [requirements for `cloudera-labs/cloudera.cluster`](https://github.com/w
 |------|------|---------|
 | `community.mysql` | collection | `3.1.0` |
 | `community.postgresql` | collection | `1.6.1` |
-| `freeipa.ansible_freeipa` | collection | `1.6.2` |
+| `freeipa.ansible_freeipa` | collection | `1.11.1` |
 | `geerlingguy.postgresql` | role | `2.2.0` |
 | `geerlingguy.mysql` (patched) | role | `master` |
 

requirements.yml

@@ -51,6 +51,6 @@ collections:
   - name: community.postgresql
     version: 1.6.1
   - name: freeipa.ansible_freeipa
-    version: 1.6.2
+    version: 1.11.1
   - name: cloud.terraform
     version: 1.11.0

roles/freeipa_client/tasks/main.yml

@@ -15,7 +15,7 @@
 # limitations under the License.
 
 - name: Disable SELinux
-  ansible.builtin.selinux:
+  ansible.posix.selinux:
     state: disabled
   notify: restart host
 
@@ -59,6 +59,22 @@
               {{ ['nameserver '] | product(ipa_server_ips | sort) | map('join') | join('\n') }}
           notify: restart host
 
+        - name: Disable nm-cloud-setup if present
+          ignore_errors: yes
+          ansible.builtin.command: "{{ __nm_cloud_setup_disable_item }}"
+          loop_control:
+            loop_var: __nm_cloud_setup_disable_item
+          loop:
+            - systemctl disable nm-cloud-setup.service nm-cloud-setup.timer
+            - systemctl stop nm-cloud-setup.service nm-cloud-setup.timer
+            - ip rule del prio 30400
+            - rm -rf /etc/systemd/system/nm-cloud-setup.service.d
+
+        - name: Ensure NetworkManager is running to maintain DHCP
+          ansible.builtin.service:
+            name: NetworkManager
+            state: restarted
+
     - name: Set /etc/hostname to the FQDN
       ansible.builtin.copy:
         content: "{{ inventory_hostname }}"

roles/freeipa_server/tasks/main.yml

@@ -43,7 +43,7 @@
     loop_var: __pyver_item
 
 - name: Disable SELinux
-  ansible.builtin.selinux:
+  ansible.posix.selinux:
     state: disabled
   notify: restart host