Sigbjorn Lie-Soland via FreeIPA-users wrote:
Hi list,
Is there a known repository with an existing ManageIQ/Cloudforms
Automate framework for FreeIPA?
I am primarily looking for the ability to create HBAC and SUDO rules as
part of the provisioning process.
You may be able to do it using automember hostgroups:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
If some regular expression is matched when a host is added it can be
added automatically to a hostgroup. You can then define HBAC and SUDO
rules to grant access via that hostgroup.
fqdn was the original idea for the matching rule. The user who
contributed the feature used a specific naming pattern for his hosts
(webserver-1234, mailserver-98aa, etc). So it was straightforward.
rob