feat(global_defaults): validate user input against one argument spec on both paths

2026-10-05 18:05:05 +02:00
parent f0b580cd3d
commit 2d1a875577
7 changed files with 259 additions and 172 deletions
@@ -1,6 +1,11 @@
 ---
 # Normalizes all input dicts into system_cfg/hypervisor_cfg/etc. here, so downstream
 # roles consume the computed facts directly with no per-role _normalize (except CIS).
+- name: Validate user input
+  validate_inputs:
+    specs:
+      - "{{ role_path }}/meta/argument_specs.yml"
+
 - name: Global defaults loaded
  ansible.builtin.debug:
    msg: Global defaults loaded.