also add ldap to etc-hosts to make sure it's persisted
# and forwarding connections to the real master
{% if "kube-master" in salt['grains.get']('roles', []) %}
127.0.0.1 api api.{{ pillar['internal_infra_domain'] }}{% if not salt['caasp_filters.is_ip'](external_fqdn) %} {{ external_fqdn }}{% endif %}
+{% elif "admin" in salt['grains.get']('roles', []) %}
+127.0.0.1 api api.{{ pillar['internal_infra_domain'] }} ldap.{{ pillar['internal_infra_domain'] }}
{% else %}
127.0.0.1 api api.{{ pillar['internal_infra_domain'] }}
{% endif %}
