mirror of
https://github.com/ansible/awx.git
synced 2026-02-22 21:46:00 -03:30
Remove TACACS+ authentication (#15547)
Remove TACACS+ authentication from AWX. Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
This commit is contained in:
committed by
jessicamack
parent
f22b192fb4
commit
e4c11561cc
@@ -1,32 +0,0 @@
|
||||
---
|
||||
- name: Plumb a tacacs+ instance
|
||||
hosts: localhost
|
||||
connection: local
|
||||
gather_facts: False
|
||||
vars:
|
||||
awx_host: "https://localhost:8043"
|
||||
tasks:
|
||||
- name: Load existing and new tacacs+ settings
|
||||
ansible.builtin.set_fact:
|
||||
existing_tacacs: "{{ lookup('awx.awx.controller_api', 'settings/tacacsplus', host=awx_host, verify_ssl=false) }}"
|
||||
new_tacacs: "{{ lookup('template', 'tacacsplus_settings.json.j2') }}"
|
||||
|
||||
- name: Display existing tacacs+ configuration
|
||||
ansible.builtin.debug:
|
||||
msg:
|
||||
- "Here is your existing tacacsplus configuration for reference:"
|
||||
- "{{ existing_tacacs }}"
|
||||
|
||||
- ansible.builtin.pause:
|
||||
prompt: "Continuing to run this will replace your existing tacacs settings (displayed above). They will all be captured. Be sure that is backed up before continuing"
|
||||
|
||||
- name: Write out the existing content
|
||||
ansible.builtin.copy:
|
||||
dest: "../_sources/existing_tacacsplus_adapter_settings.json"
|
||||
content: "{{ existing_tacacs }}"
|
||||
|
||||
- name: Configure AWX tacacs+ adapter
|
||||
awx.awx.settings:
|
||||
settings: "{{ new_tacacs }}"
|
||||
controller_host: "{{ awx_host }}"
|
||||
validate_certs: False
|
||||
@@ -188,14 +188,6 @@ services:
|
||||
- "grafana_storage:/var/lib/grafana:rw"
|
||||
depends_on:
|
||||
- prometheus
|
||||
{% endif %}
|
||||
{% if enable_tacacs|bool %}
|
||||
tacacs:
|
||||
image: dchidell/docker-tacacs
|
||||
container_name: tools_tacacs_1
|
||||
hostname: tacacs
|
||||
ports:
|
||||
- "49:49"
|
||||
{% endif %}
|
||||
# A useful container that simply passes through log messages to the console
|
||||
# helpful for testing awx/tower logging
|
||||
|
||||
@@ -1,7 +0,0 @@
|
||||
{
|
||||
"TACACSPLUS_HOST": "tacacs",
|
||||
"TACACSPLUS_PORT": 49,
|
||||
"TACACSPLUS_SECRET": "ciscotacacskey",
|
||||
"TACACSPLUS_SESSION_TIMEOUT": 5,
|
||||
"TACACSPLUS_AUTH_PROTOCOL": "ascii"
|
||||
}
|
||||
Reference in New Issue
Block a user