infra
/
ansible-role-zerotier
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Drop privilege at block level 

Apparently `local_action` and `delegate_to` handle `become: false` differently. The later ignored it when it was done at task level.
pull/25/head
Marcus Meurs 2018-12-01 04:11:05 +01:00
parent 6118217734
commit f3c9d6d2d0
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
tasks/authorize_node.yml
View File

@ -9,6 +9,13 @@
set_fact: set_fact:
zerotier_node_id: "{{ nodeid.stdout }}" zerotier_node_id: "{{ nodeid.stdout }}"
when:
- zerotier_accesstoken is defined
- not ansible_check_mode
tags:
- configuration
- block:
- name: Authorize members to network - name: Authorize members to network
uri: uri:
url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ zerotier_node_id }}" url: "{{ zerotier_api_url }}/api/network/{{ zerotier_network_id }}/member/{{ zerotier_node_id }}"
@ -21,7 +28,6 @@
authorized: "{{ zerotier_authorize_member }}" authorized: "{{ zerotier_authorize_member }}"
body_format: json body_format: json
register: auth_apiresult register: auth_apiresult
become: false
delegate_to: "{{ zerotier_api_delegate }}" delegate_to: "{{ zerotier_api_delegate }}"
- name: Configure members in network - name: Configure members in network
@ -37,7 +43,6 @@
ipAssignments: "{{ zerotier_member_ip_assignments | default([]) | list }}" ipAssignments: "{{ zerotier_member_ip_assignments | default([]) | list }}"
body_format: json body_format: json
register: conf_apiresult register: conf_apiresult
become: false
delegate_to: "{{ zerotier_api_delegate }}" delegate_to: "{{ zerotier_api_delegate }}"
when: when:
@ -45,3 +50,4 @@
- not ansible_check_mode - not ansible_check_mode
tags: tags:
- configuration - configuration
become: false