---
# Install the perforce systemctl sudoers file (validated with visudo before it
# is written). Shared by the install path and the update_sudo flow.
- name: "Install perforce systemctl sudoers file"
ansible.builtin.template:
src: "sudoers_perforce_user.j2"
dest: "/etc/sudoers.d/{{ perforce_user }}_user"
mode: '0440'
owner: "root"
group: "root"
validate: "/usr/sbin/visudo -cf %s"
| # | Change | User | Description | Committed | |
|---|---|---|---|---|---|
| #1 | 32842 | Russell C. Jackson (Rusty) |
Reorganize ansible-sdp into per-concern task files; ansible-lint production-clean - Split install.yml/cron.yml/dependencies.yml and the monitoring role into thin orchestrators plus single-purpose phase files; extract shared steps into tasks/common/ (fetch_sdp, fetch_binaries, run_mkdirs, copy_ssl, configure_broker, sudoers). - Full best-practices pass: FQCN, true/false, quoted modes, changed_when, loops, document-start markers; fill both roles' meta; add .ansible-lint. - RedHat parity: parameterized EPEL enable, dnf, full upgrade, sysctl/bbr tuning. - Collapse the 12 journal-rotation cron tasks to one; consolidate duplicate download/broker logic; fix broken tests/test.yml role reference. - Validated ansible-lint clean at the production profile (ansible-core 2.21 / python 3.12) and ansible-playbook --syntax-check OK. |