How does it handle existing resources?

The setup commands are idempotent, meaning they will automatically skip resources that already exist rather than failing or creating duplicates.

What environment variables are required for configuration?

You must provide IPA_HOST (server URL) and IPA_PASSWORD (admin password). You can also optionally specify IPA_USERNAME and IPA_VERIFY_SSL.

What is the primary purpose of the ipa-forge-setup skill?

It automates the configuration of FreeIPA resources like user groups, host groups, HBAC rules, and sudo rules specifically for cluster bringup and identity management.

Do I need shell access to use this skill?

No, it provides an MCP interface for sandboxed environments, though a CLI interface (ipa-cli) is available for environments where shell access and token efficiency are prioritized.

Can it integrate with other infrastructure tools?

Yes, it is designed to work alongside NetBox for host lookups, AWX for Ansible playbooks, and MAAS for node commissioning and enrollment.

FreeIPA Cluster Forge Setup

Name: FreeIPA Cluster Forge Setup
Author: vhspace

byvhspace

0•

クラウドインフラストラクチャ

Configures FreeIPA identity and access management for forge clusters, including user groups, host groups, HBAC, and sudo rules.

The ipa-forge-setup skill automates the complex process of identity and access management within FreeIPA for new forge cluster deployments. It provides a comprehensive set of tools to manage user and host groups, define Host-Based Access Control (HBAC) rules, and configure sudo privileges, ensuring secure and standardized SSH access across your infrastructure. Whether using the efficient CLI interface for direct shell access or the structured MCP interface for sandboxed environments, this skill simplifies cluster bringup by handling resource creation idempotently and integrating with external inventory sources like NetBox and AWX.

主な機能

01Cross-MCP integration with NetBox, AWX, and MAAS

02Dual interface support via CLI and MCP tools

03Comprehensive HBAC and sudo rule management

040 GitHub stars

05Idempotent resource creation to avoid duplication

06One-shot cluster setup with automated resource creation

ユースケース

01Managing centralized identity groups for developers and support teams

02Auditing existing FreeIPA host groups and access rules via automated CLI queries

03Provisioning SSH access and sudo privileges for a new forge cluster bringup

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add vhspace/ipa-mcp ipa-forge-setup

For use in Claude.ai and ChatGPT