-
Notifications
You must be signed in to change notification settings - Fork 7
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add res-demo template that allows CIDR and LDIF configuration
The LDIF file creates admins, users, and groups in the regular USERS OU. It also creates a RES OU with admins, users, and groups in it. The RES OU users and groups are prefixed with "res". Resolves #251 Add install_vscode role and playbook Update custom-amis.md
- Loading branch information
Showing
18 changed files
with
7,080 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
|
|
||
| .venv | ||
| rendered_templates/ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,197 @@ | ||
| #!/usr/bin/python3 | ||
|
|
||
| from textwrap import dedent | ||
|
|
||
| config = { | ||
| 'OU': 'CORP', | ||
| 'DC': 'corp,dc=res,dc=com', | ||
| 'DirectoryDomain': 'corp.res.com', | ||
| 'groups': [ | ||
| { | ||
| 'prefix': 'group', | ||
| 'OU': None, | ||
| 'first_gid': 2000, | ||
| 'index0': 1, | ||
| 'number': 2, | ||
| 'description': 'Non-RES group' | ||
| }, | ||
| { | ||
| 'prefix': 'resgroup', | ||
| 'OU': 'RES', | ||
| 'first_gid': 2010, | ||
| 'index0': 1, | ||
| 'number': 2, | ||
| 'description': 'Represents a project group in RES' | ||
| }, | ||
| { | ||
| 'name': 'RESAdministrators', | ||
| 'OU': 'RES', | ||
| 'gid': 2020, | ||
| 'description': 'Represents the group of sudoers' | ||
| } | ||
| ], | ||
| 'users': [ | ||
| { | ||
| 'prefix': 'admin', | ||
| 'OU': None, | ||
| 'number': 10, | ||
| 'first_uid': 3000, | ||
| 'first_gid': 4000, | ||
| 'groups': [ | ||
| 'RESAdministrators', | ||
| 'group01' | ||
| ] | ||
| }, | ||
| { | ||
| 'prefix': 'resadmin', | ||
| 'OU': 'RES', | ||
| 'number': 10, | ||
| 'first_uid': 3100, | ||
| 'first_gid': 4200, | ||
| 'groups': [ | ||
| 'RESAdministrators', | ||
| 'resgroup01' | ||
| ] | ||
| }, | ||
| { | ||
| 'prefix': 'user', | ||
| 'OU': None, | ||
| 'number': 100, | ||
| 'first_uid': 5000, | ||
| 'first_gid': 6000, | ||
| 'groups': [ | ||
| 'group01' | ||
| ] | ||
| }, | ||
| { | ||
| 'prefix': 'user', | ||
| 'OU': None, | ||
| 'number': 100, | ||
| 'first_index': 101 | ||
| 'first_uid': 5100, | ||
| 'first_gid': 6100, | ||
| 'groups': [ | ||
| 'group02' | ||
| ] | ||
| }, | ||
| { | ||
| 'prefix': 'resuser', | ||
| 'OU': 'RES', | ||
| 'number': 100, | ||
| 'first_uid': 15000, | ||
| 'first_gid': 16000, | ||
| 'groups': [ | ||
| 'resgroup01' | ||
| ] | ||
| }, | ||
| { | ||
| 'prefix': 'resuser', | ||
| 'OU': 'RES', | ||
| 'number': 100, | ||
| 'first_index': 101 | ||
| 'first_uid': 15100, | ||
| 'first_gid': 16100, | ||
| 'groups': [ | ||
| 'resgroup02' | ||
| ] | ||
| }, | ||
| ] | ||
| } | ||
|
|
||
| fh = open('res-demo-with-cidr/res.ldif', 'w') | ||
|
|
||
| fh.write(dedent(""" | ||
| # Create a OU to be used by RES | ||
| dn: OU=RES,OU=${OU},DC=${DC} | ||
| changetype: add | ||
| objectClass: top | ||
| objectClass: organizationalUnit | ||
| ou: RES | ||
| description: The RES application will limit syncing groups and group-members in the RES OU | ||
| # Create a OU to be used by RES to create computers | ||
| dn: OU=Computers,OU=RES,OU=${OU},DC=${DC} | ||
| changetype: add | ||
| objectClass: top | ||
| objectClass: organizationalUnit | ||
| ou: Computers | ||
| description: The RES application will limit creating computers to this OU | ||
| # Create a OU to be used by RES to create groups and add users to | ||
| dn: OU=Users,OU=RES,OU=${OU},DC=${DC} | ||
| changetype: add | ||
| objectClass: top | ||
| objectClass: organizationalUnit | ||
| ou: Users | ||
| description: The RES application will limit syncing groups and group-members in the RES OU | ||
| """)) | ||
|
|
||
| group_members = {} | ||
| for user_dict in config['users']: | ||
| user_prefix = user_dict['prefix'] | ||
| first_index = user_dict['first_index'] | ||
| for user_index in range(1, user_dict['number'] + 1): | ||
| userid = user_prefix + f"{user_index:04}" | ||
| ou = user_dict['OU'] | ||
| comment = f"Create a user: {userid}" | ||
| if ou: | ||
| comment += f" in {ou} OU" | ||
| dn = f"CN={userid},OU=Users," | ||
| if ou: | ||
| dn += f"OU={ou}," | ||
| dn += "OU=${OU},DC=${DC}" | ||
| fh.write(dedent(f""" | ||
| {comment} | ||
| dn: {dn} | ||
| changetype: add | ||
| objectClass: top | ||
| objectClass: person | ||
| objectClass: organizationalPerson | ||
| objectClass: user | ||
| cn: {userid} | ||
| sAMAccountName: {userid} | ||
| name: {userid} | ||
| userPrincipalName: {userid}@${{DirectoryDomain}} | ||
| mail: {userid}@${{DirectoryDomain}} | ||
| uidNumber: {user_dict['first_uid']+user_index} | ||
| gidNumber: {user_dict['first_gid']+user_index} | ||
| unixHomeDirectory: /home/{userid} | ||
| loginShell: /bin/bash | ||
| """)) | ||
| for group in user_dict['groups']: | ||
| if group not in group_members: | ||
| group_members[group] = [] | ||
| group_members[group].append(dn) | ||
|
|
||
| for group_dict in config['groups']: | ||
| ou = group_dict['OU'] | ||
| for group_index in range(group_dict.get('index0', 1), group_dict.get('number', 1) + 1): | ||
| if 'index0' in group_dict: | ||
| group_name = f"{group_dict['prefix']}{group_index:02}" | ||
| gid = group_dict['first_gid'] + group_index | ||
| else: | ||
| group_name = group_dict['name'] | ||
| gid = group_dict['gid'] | ||
| comment = f"# Create a group: {group_name}" | ||
| if ou: | ||
| comment += f" in {ou} OU" | ||
| dn = f"CN={group_name},OU=Users," | ||
| if ou: | ||
| dn += "OU={ou}," | ||
| dn += "OU=${OU},DC=${DC}" | ||
| fh.write(dedent(f""" | ||
| {comment} | ||
| dn: {dn} | ||
| changetype: add | ||
| objectClass: top | ||
| objectClass: group | ||
| cn: {group_name} | ||
| description: {group_dict['description']} | ||
| distinguishedName: {dn} | ||
| name: {group_name} | ||
| sAMAccountName: {group_name} | ||
| objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=${{DC}} | ||
| gidNumber: {gid} | ||
| """)) | ||
| for member_dn in group_members.get(group_name, []): | ||
| fh.write(f"member: {member_dn}\n") |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| #!/bin/bash -xe | ||
|
|
||
| script_dir=$(dirname $(realpath $0)) | ||
| cd $script_dir | ||
| aws s3 cp s3://aws-hpc-recipes/main/recipes/res/res_demo_env/assets/res-demo-stack.yaml res-demo/. | ||
| aws s3 cp s3://aws-hpc-recipes/main/recipes/res/res_demo_env/assets/bi.yaml res-demo/. | ||
| aws s3 cp s3://aws-hpc-recipes/main/recipes/net/hpc_large_scale/assets/main.yaml res-demo/networking.yaml | ||
|
|
||
| aws s3 cp s3://aws-hpc-recipes/main/recipes/res/res_demo_env/assets/res.ldif res-demo/. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,2 @@ | ||
| boto3 | ||
| jinja2 |
Oops, something went wrong.