Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/outerbounds/ansible-role-onprem-workstations
Ansible role for configuring a machine to run Outerbound's on-premise workstation
https://github.com/outerbounds/ansible-role-onprem-workstations
Last synced: 4 days ago
JSON representation
Ansible role for configuring a machine to run Outerbound's on-premise workstation
- Host: GitHub
- URL: https://github.com/outerbounds/ansible-role-onprem-workstations
- Owner: outerbounds
- Created: 2023-10-02T21:47:51.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2023-10-05T18:55:08.000Z (about 1 year ago)
- Last Synced: 2023-10-06T13:21:50.273Z (about 1 year ago)
- Size: 7.96 MB
- Stars: 0
- Watchers: 4
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Onprem Workstations
This role:
* installs and starts docker
* downloads an Outerbounds PAM file and configures ssh to use
* Creates a new user named `outerbounds` and provisions with access to docker## Requirements
This role is created to be run on Ubuntu 18.04
## Installing
```
$ ansible-galaxy role install git+https://github.com/outerbounds/ansible-role-onprem-workstations.git,
```## Role variables
| Variable | Default value | Description |
|-------------------------------------|---------------------------------|-----------------------------------------------------------------------------------------------------------------------|
| `outerbounds_issuer` | `"https://issuer.example.com"` | The URL on which the jwks public key is hosted. The PAM will make a request on `/.well-known/jwks`|
| `outerbounds_audience` | `"https://foo.outerbounds.com/origin"` | The expected audience claim on the JWT that will be enforced when users try authenticate via SSH password. |