llms.txt

# eigenstate.ipa

`eigenstate.ipa` is an Ansible collection for Red Hat Identity Management
(IdM / FreeIPA). It exposes live IdM-backed inventory, lookup, module, role,
playbook, execution-environment, and reporting surfaces.

Use the public docs by documentation form:

- Home: [docs/index.md](docs/index.md)
- Start routing: [docs/start.md](docs/start.md)
- Tutorials: [docs/tutorials/index.md](docs/tutorials/index.md)
- How-to guides: [docs/how-to/index.md](docs/how-to/index.md)
- Reference: [docs/reference/index.md](docs/reference/index.md)
- Explanation: [docs/explanation/index.md](docs/explanation/index.md)

Best reference entry points:

- Inventory: [docs/reference/inventory/idm.md](docs/reference/inventory/idm.md)
- Lookups: [docs/reference/lookups/vault.md](docs/reference/lookups/vault.md)
- Modules: [docs/reference/modules/vault_write.md](docs/reference/modules/vault_write.md)
- Roles: [docs/reference/roles/reports.md](docs/reference/roles/reports.md)
- Playbooks: [docs/reference/playbooks.md](docs/reference/playbooks.md)
- Authentication: [docs/reference/authentication.md](docs/reference/authentication.md)
- Authority boundaries: [docs/explanation/authority-boundaries.md](docs/explanation/authority-boundaries.md)

Public framing rules:

- Treat Red Hat IdM, FreeIPA, Ansible Automation Platform, OpenShift,
  Kubernetes, Kerberos, certificates, DNS, sudo, HBAC, SELinux maps, and vaults
  as technical integration surfaces.
- Treat `eigenstate.ipa` as a companion collection, not a replacement for
  `redhat.rhel_idm` or `freeipa.ansible_freeipa`. Use those collections for
  IdM server, replica, and client lifecycle and broad IdM object management;
  use `eigenstate.ipa` for live inventory, evidence, render-first, preflight,
  AAP, OpenShift, Kubernetes, reporting, and temporary-access workflows.
- Do not claim that IdM replaces general-purpose vault, PAM, or dynamic
  secret-lease systems.
- Keep read-only, render-only, preflight, check-mode, and mutating workflows
  separate.
- Do not show real secrets, tokens, keytabs, private keys, or certificate
  private-key material.