aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles/superusers/tasks/adjust-group.yml
diff options
context:
space:
mode:
authorTrygve Laugstøl <trygvis@inamo.no>2018-11-05 23:18:06 +0100
committerTrygve Laugstøl <trygvis@inamo.no>2018-11-05 23:18:06 +0100
commitb5b7e21c8ba3c68eab9cd244602f27c21aa5f36b (patch)
tree8c0f0d802773664e9d01ebf7ae6fb066b6f5fd93 /ansible/roles/superusers/tasks/adjust-group.yml
parent85b3d2a16b5cfbb499a4ebcb88967dcdc334cf21 (diff)
downloadinfra-b5b7e21c8ba3c68eab9cd244602f27c21aa5f36b.tar.gz
infra-b5b7e21c8ba3c68eab9cd244602f27c21aa5f36b.tar.bz2
infra-b5b7e21c8ba3c68eab9cd244602f27c21aa5f36b.tar.xz
infra-b5b7e21c8ba3c68eab9cd244602f27c21aa5f36b.zip
Importing Bitraf's lusers, updating superusers.
Diffstat (limited to 'ansible/roles/superusers/tasks/adjust-group.yml')
-rw-r--r--ansible/roles/superusers/tasks/adjust-group.yml21
1 files changed, 21 insertions, 0 deletions
diff --git a/ansible/roles/superusers/tasks/adjust-group.yml b/ansible/roles/superusers/tasks/adjust-group.yml
new file mode 100644
index 0000000..32666ad
--- /dev/null
+++ b/ansible/roles/superusers/tasks/adjust-group.yml
@@ -0,0 +1,21 @@
+- vars:
+ members: "{{ getent_group[group][2].split(',') if group in getent_group else [] }}"
+ to_add: "{{ usernames | intersect(superusers) | difference(members) }}"
+ to_remove: "{{ members | difference(superusers) }}"
+ tags: superusers
+ block:
+ - debug: var=group
+ - debug: var=to_add
+ - debug: var=to_remove
+
+ - name: gpasswd --add
+ with_items: "{{ to_add }}"
+ when: (item|length) > 0
+ become: yes
+ shell: "gpasswd --add {{ item }} {{ group }}"
+
+ - name: gpasswd --delete
+ with_items: "{{ to_remove }}"
+ when: (item|length) > 0
+ become: yes
+ shell: "gpasswd --delete {{ item }} {{ group }}"