Funk-lab/ansible/playbooks/gpu-01.yml
alkatrazz edf4a6294d feat(auth): annuaire Authentik + portail consoles Guacamole
- k8s/apps/authentik : IdP OIDC (auth.lab.local), namespace auth —
  server + worker 2026.5.3, Redis in-cluster, PG sur storage-01, PVC media
- k8s/apps/guacamole : portail consoles SSH web s01/g01 (portail.lab.local) —
  guacd + webapp 1.6.0, SSO OIDC vers Authentik, Job initdb idempotent
- ansible : rôle console_user (user sans sudo pour les consoles, s01 + g01),
  bases PG authentik/guacamole, secrets vault (mdp PG + clé SSH console)
- doc : admin/k8s/auth-portal.md (déploiement, config initiale, pièges)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-06 21:19:23 +02:00

12 lines
476 B
YAML

---
- name: Configure gpu-01
hosts: gpu_hosts
roles:
- { role: hermes_user, tags: [hermes_user] }
- { role: common, tags: [common] }
- { role: rocm, tags: [rocm] }
- { role: nfs_client, tags: [nfs_client] }
- { role: llama_server, tags: [llama_server] }
- { role: node_exporter, tags: [node_exporter] }
- { role: satisfactory_server, tags: [satisfactory_server] }
- { role: console_user, tags: [console_user] }