Open ySp-chld opened 1 year ago
If copy_custom_security_configs is true custom file security_plugin_conf.yml is not deployed because the check is made on auth_type == 'oidc'.
copy_custom_security_configs is true
security_plugin_conf.yml
auth_type == 'oidc'
- name: Security Plugin configuration | Copy the security configuration file 3 to cluster template: src: security_plugin_conf.yml dest: "{{ os_sec_plugin_conf_path }}/config.yml" backup: yes owner: "{{ os_user }}" group: "{{ os_user }}" mode: 0600 force: yes when: auth_type == 'oidc'
So if you customised security_plugin_conf.yml to use ldap or anything but oidc then you cannot deploy the configuration.
I suggest an easy fix by adding an alternative check :
- name: Security Plugin configuration | Copy the security configuration file 3 to cluster template: src: security_plugin_conf.yml dest: "{{ os_sec_plugin_conf_path }}/config.yml" backup: yes owner: "{{ os_user }}" group: "{{ os_user }}" mode: 0600 force: yes when: auth_type == 'oidc' or copy_custom_security_configs
This changed should not cause too much trouble.
[Triage] Hey @french-kiwy thanks for raising an issue, I now get the problem, can you please raise a PR and contribute to the fix you suggested? Thank you @gaiksaya @bbarani @peterzhuamazon
If
copy_custom_security_configs is true
custom filesecurity_plugin_conf.yml
is not deployed because the check is made onauth_type == 'oidc'
.So if you customised
security_plugin_conf.yml
to use ldap or anything but oidc then you cannot deploy the configuration.I suggest an easy fix by adding an alternative check :
This changed should not cause too much trouble.