[sysadmin-notify] [ansible] Update sudo tasks
commit 4e0a914b8f38d0bc8018d4f0c409b76cf54edd0e
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Fri Jun 23 12:21:23 2023 +0200
Update sudo tasks
roles/sudo/tasks/main.yml | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/roles/sudo/tasks/main.yml b/roles/sudo/tasks/main.yml
index aede6ad..8dffd37 100644
--- a/roles/sudo/tasks/main.yml
+++ b/roles/sudo/tasks/main.yml
@@ -8,7 +8,7 @@
#
- name: setup /etc/sudoers.d/01-sysadmin-main
copy: src="{{ private }}/files/sudo/sysadmin-main"
dest=/etc/sudoers.d/01-sysadmin-main owner=root group=root mode=0600
- when: sudoers_main is not defined
+ when: "sudoers_main is not defined and (primary_auth_source |
default('fas')) == 'fas'"
tags:
- config
- sudo
@@ -44,6 +44,7 @@
- "{{ private }}/files/sudo/{{ ansible_hostname }}-sudoers"
- "{{ private }}/files/sudo/{{ ansible_domain }}-sudoers"
- "{{ private }}/files/sudo/default"
+ when: inventory_hostname.startswith('batcave')
tags:
- config
- sudo