29.11. Using Ansible to install an IdM replica configured to use eDNS

Procedure

1. On the controller, create a playbook named install-replica-edns.yml that includes a task to install an IdM replica with eDNS enabled:

   ---
   - name: Playbook to configure an IdM replica with eDNS enabled
     hosts: ipareplicas
     become: true
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
     vars:
       ipaadmin_password: "{{ ipaadmin_password }}"
       ipareplica_domain=idm.example.com
       ipareplica_dns_over_tls=true
   
     roles:
     - role: freeipa.ansible_freeipa.ipareplica

   If DNSSEC validation is turned off on the IdM server that the replica is communicating with, you must also disable it on the replica by setting ipaclient_no_dnssec_validation = true in the vars section of the playbook. Otherwise, DNS over TLS will not function correctly for the replica.

   To install integrated IdM DNS on the IdM replica, add ipareplica_setup_dns=true and ipareplica_dot_forwarders="<server_ip>#<dns_server_hostname>" to the list of variables.

2. Run the Ansible playbook:

   $ ansible-playbook --vault-password-file=password_file -v -i ~/MyPlaybooks/inventory ~/MyPlaybooks/install-replica-edns.yml