FreeIPA/IPA modules in community.general

russoz
Fri, 20 Jun 2025 22:51:18 +0000
Project Discussions

Hi everyone,

The community.general collection currently hosts 19 modules related to FreeIPA or IPA. There 25 open issues related to those modules, some dating back from 2021. Whilst these modules have had some code changes, some as recent as February this year, most of the PRs for the last 12 months were about documentation updates.

However, there is another collection, freeipa.ansible_freeipa (github, galaxy) that seems to be way more up-to-date and actively maintained. To be fair, they have open issues pre-dating the ones in c.g., but they have surpassed the issues reported in c.g. in many different levels.
Out of the 19 modules found in c.g., I found a direct corresponding module in the ansible-freeipa collection for all but 4 of those modules, namely: ipa_getkeytab, ipa_otpconfig, ipa_otptoken, and ipa_subca.

I don’t think it make sense to split our efforts in these two different fronts for the same product/service, so I would like to feel the temperature in the community about deprecating the modules in c.g. (with a very long deprecation period, not to disrupt anyone’s playbooks), and focus the IPA effort in the dedicated collection.

What do you think?

24 posts - 9 participants

Read full topic