---
# Populate the baseline limits group with all users once, immediately, so a fresh
# converge enforces right away. Guarded by a marker so it runs a single time and
# stays idempotent; the SDP's hourly master cron maintains membership afterwards.
- name: "Populate the limits group now (the hourly master cron maintains it after)"
  ansible.builtin.shell: >-
    /p4/common/bin/update_limits.py {{ perforce_id }}
    && touch /p4/common/config/.guardrails_populated
  args:
    creates: "/p4/common/config/.guardrails_populated"
  become: true
  become_user: "{{ perforce_user }}"