3.2. Ensuring the presence of a standard user vault in IdM using Ansible

Procedure

1. Navigate to the ~/MyPlaybooks/ directory:

   $ cd ~/MyPlaybooks/

2. Make a copy of the ensure-standard-vault-is-present.yml Ansible playbook file from the relevant collections directory. For example:

   $ cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/vault/ensure-standard-vault-is-present.yml ensure-standard-vault-is-present-copy.yml

3. Open the ensure-standard-vault-is-present-copy.yml file for editing.

4. Adapt the file by setting the following variables in the freeipa.ansible_freeipa.ipavault task section:

   • Set the ipaadmin_principal variable to idm_user.
   • Set the ipaadmin_password variable to the password of idm_user.
   • Set the user variable to idm_user.
   • Set the name variable to my_vault.

   • Set the vault_type variable to standard.

     This the modified Ansible playbook file for the current example:

   ---
   - name: Tests
     hosts: ipaserver
     gather_facts: false
   
     tasks:
     - freeipa.ansible_freeipa.ipavault:
         ipaadmin_principal: idm_user
         ipaadmin_password: idm_user_password
         user: idm_user
         name: my_vault
         vault_type: standard

5. Save the file.

6. Run the playbook:

   $ ansible-playbook -v -i inventory ensure-standard-vault-is-present-copy.yml