fix(configuration): deploy sudoers rules for bool-or-string sudo values
This commit is contained in:
@@ -15,8 +15,7 @@
|
|||||||
validate: /usr/sbin/visudo --check --file=%s
|
validate: /usr/sbin/visudo --check --file=%s
|
||||||
|
|
||||||
- name: Deploy per-user sudoers rules
|
- name: Deploy per-user sudoers rules
|
||||||
# Jinja truthiness: bool true / a rule string => deploy; false / '' / unset => skip.
|
when: (item.value.sudo | default(false)) not in [false, '', none]
|
||||||
when: item.value.sudo | default(false)
|
|
||||||
vars:
|
vars:
|
||||||
configuration_sudoers_rule: >-
|
configuration_sudoers_rule: >-
|
||||||
{{ item.value.sudo if item.value.sudo is string else 'ALL=(ALL) NOPASSWD: ALL' }}
|
{{ item.value.sudo if item.value.sudo is string else 'ALL=(ALL) NOPASSWD: ALL' }}
|
||||||
|
|||||||
Reference in New Issue
Block a user