mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-14 05:22:05 +00:00
5d962c06ca
There is a new sudocmd management module placed in the plugins folder: plugins/modules/ipasudocmd.py The sudocmd module allows to add or remove sudo commands. The sudocmd module is as compatible as possible to the Ansible upstream ipa_sudocmd module. Here is the documentation for the module: README-sudocmd.md New example playbooks have been added: playbooks/sudocmd/ensure-sudocmd-is-absent.yml playbooks/sudocmd/ensure-sudocmd-is-present.yml Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
121 lines
2.7 KiB
YAML
121 lines
2.7 KiB
YAML
---
|
|
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Ensure sudocmds are absent
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/bin/su
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: absent
|
|
|
|
- name: Ensure sudocmd is present
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name: /usr/bin/su
|
|
state: present
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure sudocmd is present again
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name: /usr/bin/su
|
|
state: present
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure sudocmd is absent
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name: /usr/bin/su
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure sudocmd is absent again
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name: /usr/bin/su
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure multiple sudocmd are present
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: present
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure multiple sudocmd are present again
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: present
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure multiple sudocmd are absent
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure multiple sudocmd are absent again
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed
|
|
- name: Ensure sudocmds are absent
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/bin/su
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: absent
|
|
|
|
- name: Ensure sudocmds are absent
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
state: absent
|
|
|
|
- name: Ensure sudocmds are present
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/iwlist
|
|
state: present
|
|
|
|
- name: Ensure multiple sudocmd are absent when only one was present
|
|
ipasudocmd:
|
|
ipaadmin_password: MyPassword123
|
|
name:
|
|
- /usr/sbin/ifconfig
|
|
- /usr/sbin/iwlist
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed
|