ansible.builtin.purefa_dsrole (v2.9.27) — module

Configure FlashArray Directory Service Roles

| "added in version" 2.8 of ansible.builtin"

Authors: Pure Storage Ansible Team (@sdodsley) <pure-ansible-team@purestorage.com>

preview | supported by community

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

Set or erase directory services role configurations.

Only available for FlashArray running Purity 5.2.0 or higher


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Delete existing array_admin directory service role
  purefa_dsrole:
    role: array_admin
    state: absent
    fa_url: 10.10.10.2
    api_token: e31060a7-21fc-e277-6240-25983c6c4592
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Create array_admin directory service role
  purefa_dsrole:
    role: array_admin
    group_base: "OU=PureGroups,OU=SANManagers"
    group: pureadmins
    fa_url: 10.10.10.2
    api_token: e31060a7-21fc-e277-6240-25983c6c4592
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Update ops_admin directory service role
  purefa_dsrole:
    role: ops_admin
    group_base: "OU=PureGroups"
    group: opsgroup
    fa_url: 10.10.10.2
    api_token: e31060a7-21fc-e277-6240-25983c6c4592

Inputs

    
role:
    choices:
    - array_admin
    - ops_admin
    - readonly
    - storage_admin
    description:
    - The directory service role to work on

group:
    description:
    - Sets the common Name (CN) of the configured directory service group containing users
      for the FlashBlade. This name should be just the Common Name of the group without
      the CN= specifier.
    - Common Names should not exceed 64 characters in length.
    type: str

state:
    choices:
    - absent
    - present
    default: present
    description:
    - Create or delete directory service role
    type: str

fa_url:
    description:
    - FlashArray management IPv4 address or Hostname.
    required: true
    type: str

api_token:
    description:
    - FlashArray API token for admin privileged user.
    required: true
    type: str

group_base:
    description:
    - Specifies where the configured group is located in the directory tree. This field
      consists of Organizational Units (OUs) that combine with the base DN attribute and
      the configured group CNs to complete the full Distinguished Name of the groups.
      The group base should specify OU= for each OU and multiple OUs should be separated
      by commas. The order of OUs is important and should get larger in scope from left
      to right.
    - Each OU should not exceed 64 characters in length.
    type: str