forked from ISTI-ansible-roles/ansible-roles
19 lines
656 B
YAML
19 lines
656 B
YAML
---
|
|
- block:
|
|
- name: Add the additional service groups
|
|
group: name={{ item }} state=present
|
|
with_items:
|
|
- '{{ service_sudoers_group }}'
|
|
|
|
- name: Add selected users to the limited sudoers group
|
|
user: name={{ item.login }} groups={{ service_sudoers_group }} append=yes
|
|
with_items: '{{ users_system_users | default([]) }}'
|
|
when: item.limited_sudoers_user
|
|
|
|
- name: Remove selected users to the limited sudoers group
|
|
user: name={{ item.login }} groups={{ service_sudoers_group }} append=yes
|
|
with_items: '{{ users_system_users | default([]) }}'
|
|
when: not item.limited_sudoers_user
|
|
|
|
tags: [ 'services', 'users' ]
|