---
# Deploy the guardrail scripts to /p4/common/bin. The trigger and update_limits.py
# are templated so group/user names come from inventory; the helper is copied.
- name: "Deploy the templated keep_group_unset trigger"
  ansible.builtin.template:
    src: "keep_group_unset.py.j2"
    dest: "/p4/common/bin/triggers/keep_group_unset.py"
    owner: "{{ perforce_user }}"
    group: "{{ perforce_group }}"
    mode: '0700'
  become: true

- name: "Deploy the templated update_limits.py membership updater"
  ansible.builtin.template:
    src: "update_limits.py.j2"
    dest: "/p4/common/bin/update_limits.py"
    owner: "{{ perforce_user }}"
    group: "{{ perforce_group }}"
    mode: '0700'
  become: true

- name: "Deploy the group-limits helper"
  ansible.builtin.copy:
    src: "manage_p4group.py"
    dest: "/p4/common/bin/manage_p4group.py"
    owner: "{{ perforce_user }}"
    group: "{{ perforce_group }}"
    mode: '0700'
  become: true