Draft ipsilon installation

4 files changed, 30 insertions, 0 deletions

diff --git a/personal_infra/playbooks/roles/deploy_ipsilon/tasks/main.yml b/personal_infra/playbooks/roles/deploy_ipsilon/tasks/main.yml
new file mode 100644
index 00000000..1ac50a14
--- /dev/null
+++ b/personal_infra/playbooks/roles/deploy_ipsilon/tasks/main.yml
@@ -0,0 +1,5 @@
+---
+- name: install ipsilon (if this task fails, run kinit as root)
+  command: ipsilon-server-install --hostname {{ ipsilon.hostname }} --ipa yes --openidc yes --admin-user {{ ipsilon.admin_user }}
+  args:
+    creates: /etc/ipsilon/idp
diff --git a/personal_infra/playbooks/site.yaml b/personal_infra/playbooks/site.yaml
index 63af423b..ddeced0e 100644
--- a/personal_infra/playbooks/site.yaml
+++ b/personal_infra/playbooks/site.yaml
@@ -36,3 +36,9 @@
   gather_facts: false
   roles:
     - talos
+
+- name: deploy ipsilon
+  hosts: ipsilon
+  tags: ipsilon
+  roles:
+    - deploy_ipsilon
diff --git a/personal_infra/puppet/modules/ipsilon/manifests/init.pp b/personal_infra/puppet/modules/ipsilon/manifests/init.pp
new file mode 100644
index 00000000..f4de956f
--- /dev/null
+++ b/personal_infra/puppet/modules/ipsilon/manifests/init.pp
@@ -0,0 +1,18 @@
+class ipsilon {
+  package {'ipsilon-tools-ipa':
+    source => 'https://kojipkgs.fedoraproject.org//packages/ipsilon/3.0.4/5.el8/noarch/ipsilon-tools-ipa-3.0.4-5.el8.noarch.rpm',
+  }
+
+  package {'ipsilon-openidc':
+    source => 'https://kojipkgs.fedoraproject.org//packages/ipsilon/3.0.4/5.el8/noarch/ipsilon-openidc-3.0.4-5.el8.noarch.rpm',
+  }
+
+  package {'ipsilon-authpam':
+    source => 'https://kojipkgs.fedoraproject.org//packages/ipsilon/3.0.4/5.el8/noarch/ipsilon-authpam-3.0.4-5.el8.noarch.rpm',
+  }
+
+  service {'httpd':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/personal_infra/puppet/site/ipsilon-test.h1.int.pdp7.net.pp b/personal_infra/puppet/site/ipsilon-test.h1.int.pdp7.net.pp
index d304c567..6c039667 100644
--- a/personal_infra/puppet/site/ipsilon-test.h1.int.pdp7.net.pp
+++ b/personal_infra/puppet/site/ipsilon-test.h1.int.pdp7.net.pp
@@ -1,2 +1,3 @@
 node 'ipsilon-test.h1.int.pdp7.net' {
+  class {'ipsilon':}
 }