Allow install of krb5 & openldap client libs, for external providers (#109)

* Add missing 'become' parameter for user creation
* Add missing 'kdc_host' for set up KRB clients, etc.

Signed-off-by: Chuck Levesque <clevesque@users.noreply.github.com>

Author: clevesque

pvc_base_prereqs_ext.yml

@@ -135,7 +135,8 @@
 
 - name: Create local users on ECS Nodes
   hosts: ecs_nodes
-  gather_facts: yes
+  become: yes
+  gather_facts: no
   tags:
     - pvc
     - users
@@ -162,7 +163,7 @@
 
 # DB Connectors
 - name: Install MySQL Connector
-  hosts: cloudera_manager, cluster, ecs_nodes
+  hosts: cloudera_manager, cluster
   gather_facts: no
   become: yes
   roles:
@@ -173,7 +174,7 @@
     - full_cluster
 
 - name: Install Oracle Connector
-  hosts: cloudera_manager, cluster, ecs_nodes
+  hosts: cloudera_manager, cluster
   gather_facts: no
   become: yes
   roles:
@@ -205,7 +206,7 @@
   become: yes
   roles:
     - role: cloudera.cluster.infrastructure.krb5_client
-      when: "'krb5_server' in groups"
+      when: krb5_kdc_host is defined or 'krb5_server' in groups
   tags:
     - security
     - kerberos
@@ -279,7 +280,6 @@
         (tls | default(False)
         or manual_tls_cert_distribution | default(False))
         and not (autotls | default(False))
-
 # ENDBLOCK # NiFi TLS
 # STARTBLOCK # Install Cluster Service Infrastructure II
 

pvc_base_prereqs_int.yml

@@ -178,7 +178,7 @@
   become: yes
   roles:
     - role: cloudera.cluster.prereqs.kerberos
-      when: "'krb5_server' in groups"  # Only set up if cloudera.cluster has itself provisioned Kerberos
+      when: krb5_kdc_host is defined or 'krb5_server' in groups
   tags:
     - kerberos
     - prereqs
@@ -198,7 +198,7 @@
 # STARTBLOCK # Configure CM
 
 - name: Restart Cloudera Manager Agents
-  hosts: cloudera_manager, cluster
+  hosts: cloudera_manager, cluster, ecs_nodes
   gather_facts: no
   become: yes
   tasks:
@@ -211,7 +211,7 @@
     - restart_agents
 
 - name: Ensure that the agents are heartbeating
-  hosts: cloudera_manager, cluster
+  hosts: cloudera_manager, cluster, ecs_nodes
   gather_facts: yes
   any_errors_fatal: yes
   roles: