99711abf23
The enable-fips role has been refactored to support both centos/rhel and Ubuntu. In addition, for the Ubuntu tasks, a small role is added to enable a Ubuntu Advantage subscription. This is required because Ubuntu requires a subscription to enable FIPS. This role takes a subscription key as a parameter (ubuntu_ua_token.token). In Openstack, this is provided by the openstack-fips job in openstack/project-config, which will be the base job for OpenStack jobs. This job will provide the ubuntu_ua_token.token. Change-Id: I47a31f680172b47584510adb672b68498a85bd32
22 lines
863 B
YAML
22 lines
863 B
YAML
---
|
|
- name: Make sure this role is run on RHEL/CentOS/Ubuntu systems
|
|
fail:
|
|
msg: This role supports RHEL/CentOS/Fedora/Ubuntu systems only
|
|
when:
|
|
- not (ansible_distribution == 'CentOS' and ansible_distribution_major_version|int >= 8)
|
|
- not (ansible_distribution == 'Red Hat Enterprise Linux' and ansible_distribution_major_version|int >= 8)
|
|
- not ansible_distribution == 'Fedora'
|
|
- not ansible_distribution == 'Ubuntu'
|
|
|
|
- name: Do tasks for RHEL/Centos systems
|
|
include_tasks: rhel.yaml
|
|
when: >
|
|
(ansible_distribution == 'CentOS' and ansible_distribution_major_version|int >= 8) or
|
|
(ansible_distribution == 'Red Hat Enterprise Linux' and ansible_distribution_major_version|int >= 8) or
|
|
ansible_distribution == 'Fedora'
|
|
|
|
- name: Do tasks for Ubuntu
|
|
include_tasks: ubuntu.yaml
|
|
when: >
|
|
(ansible_distribution == "Ubuntu")
|