---
# Group resource guardrails (commit server), broken into phases. Included from
# main.yml behind guardrails_enabled. Templates the SDP's keep_group_unset.py
# trigger and update_limits.py from inventory (so no group/user name is
# hardcoded), establishes the Max* values on each managed group, and populates
# the limits group once. Membership is maintained afterwards by the SDP's
# existing hourly master cron; this phase adds no cron job.
#
# p4 operations run through p4master_run as the configured super user
# (perforce_admin_user) -- the user the trigger exempts.
- name: "Deploy the guardrail scripts (trigger, updater, helper)"
  ansible.builtin.include_tasks: "group_limits/deploy_scripts.yml"

- name: "Set the resource limits on each managed group"
  ansible.builtin.include_tasks: "group_limits/set_limits.yml"

- name: "Populate the limits group membership"
  ansible.builtin.include_tasks: "group_limits/populate.yml"