auth parameter, to perform authentication.The below requirements are needed on the host that executes this module.
| Parameter | Choices/Defaults | Comments |
|---|---|---|
| ca_file - | A PEM file containing the trusted CA certificates. The certificate presented by the server will be verified using these CA certificates. If ca_file parameter is not set, system wide CA certificate store is used. Default value is set by OVIRT_CAFILE environment variable. | |
| compress boolean |
| A boolean flag indicating if the SDK should ask the server to send compressed responses. The default is True. Note that this is a hint for the server, and that it may return uncompressed data even when this parameter is set to True. |
| headers - added in 2.4 | A dictionary of HTTP headers to be added to each API call. | |
| hostname - added in 2.6 | A string containing the hostname of the server. For example: server.example.com. Default value is set by OVIRT_HOSTNAME environment variable. Either url or hostname is required. | |
| insecure boolean |
| A boolean flag that indicates if the server TLS certificate and host name should be checked. |
| kerberos boolean |
| A boolean flag indicating if Kerberos authentication should be used instead of the default basic authentication. |
| password - | The password of the user. Default value is set by OVIRT_PASSWORD environment variable. | |
| state - |
| Specifies if a token should be created or revoked. |
| timeout - | The maximum total time to wait for the response, in seconds. A value of zero (the default) means wait forever. If the timeout expires before the response is received an exception will be raised. | |
| token - added in 2.5 | SSO token to be used instead of login with username/password. Default value is set by OVIRT_TOKEN environment variable. | |
| url - | A string containing the API URL of the server. For example: https://server.example.com/ovirt-engine/api. Default value is set by OVIRT_URL environment variable. Either url or hostname is required. | |
| username - | The name of the user. For example: admin@internal Default value is set by OVIRT_USERNAME environment variable. |
Note
- block:
# Create a vault with `ovirt_password` variable which store your
# oVirt/RHV user's password, and include that yaml file with variable:
- include_vars: ovirt_password.yml
- name: Obtain SSO token with using username/password credentials
ovirt_auth:
url: https://ovirt.example.com/ovirt-engine/api
username: admin@internal
ca_file: ca.pem
password: "{{ ovirt_password }}"
# Previous task generated I(ovirt_auth) fact, which you can later use
# in different modules as follows:
- ovirt_vm:
auth: "{{ ovirt_auth }}"
state: absent
name: myvm
always:
- name: Always revoke the SSO token
ovirt_auth:
state: absent
ovirt_auth: "{{ ovirt_auth }}"
# When user will set following environment variables:
# OVIRT_URL = https://fqdn/ovirt-engine/api
# OVIRT_USERNAME = admin@internal
# OVIRT_PASSWORD = the_password
# User can login the oVirt using environment variable instead of variables
# in yaml file.
# This is mainly useful when using Ansible Tower or AWX, as it will work
# for Red Hat Virtualization credentials type.
- name: Obtain SSO token
ovirt_auth:
state: present
Common return values are documented here, the following are the fields unique to this module:
| Key | Returned | Description | |
|---|---|---|---|
| ovirt_auth complex | success | Authentication facts, needed to perform authentication to oVirt/RHV. | |
| ca_file string | success | CA file, which is used to verify SSL/TLS connection. Sample: ca.pem | |
| compress boolean | success | Flag indicating if compression is used for connection. Sample: True | |
| headers dictionary | success | Dictionary of HTTP headers to be added to each API call. | |
| insecure boolean | success | Flag indicating if insecure connection is used. | |
| kerberos boolean | success | Flag indicating if kerberos is used for authentication. | |
| timeout integer | success | Number of seconds to wait for response. | |
| token string | success | SSO token which is used for connection to oVirt/RHV engine. Sample: kdfVWp9ZgeewBXV-iq3Js1-xQJZPSEQ334FLb3eksoEPRaab07DhZ8ED8ghz9lJd-MQ2GqtRIeqhvhCkrUWQPw | |
| url string | success | URL of the oVirt/RHV engine API endpoint. Sample: https://ovirt.example.com/ovirt-engine/api | |
Hint
If you notice any issues in this documentation, you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.9/modules/ovirt_auth_module.html