Add cli playbook to grant access to a given path
This change will provide a means to grant access to a directory for a given user via ACLs. Task: 38422 Story: 2007212 Change-Id: I006291a2465aa4c950abce76f9e5f9459b76e330 Signed-off-by: Kevin Carter <kecarter@redhat.com>
This commit is contained in:
parent
e11fe1b5b6
commit
5ec397d1be
|
@ -0,0 +1,50 @@
|
|||
---
|
||||
# Copyright 2020 Red Hat, Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
- name: Playbook for granting a given user local access
|
||||
connection: "{{ (tripleo_target_host is defined) | ternary('ssh', 'local') }}"
|
||||
hosts: "{{ tripleo_target_host | default('localhost') }}"
|
||||
remote_user: "{{ tripleo_target_user | default(lookup('env', 'USER')) }}"
|
||||
gather_facts: "{{ (tripleo_target_host is defined) | ternary(true, false) }}"
|
||||
any_errors_fatal: true
|
||||
become: true
|
||||
pre_tasks:
|
||||
- name: Check for required inputs
|
||||
fail:
|
||||
msg: >
|
||||
Input missing `{{ item }}`
|
||||
when:
|
||||
- hostvars[inventory_hostname][item] is undefined
|
||||
loop:
|
||||
- access_path
|
||||
- execution_user
|
||||
tasks:
|
||||
- name: Ensure access path exists
|
||||
file:
|
||||
path: "{{ access_path }}"
|
||||
state: directory
|
||||
owner: "42430" # Used to ensure mistral has access, remove this when mistral is gone.
|
||||
group: "42430" # Used to ensure mistral has access, remove this when mistral is gone.
|
||||
register: access_path
|
||||
|
||||
- name: Grant privileges to the execution user
|
||||
acl:
|
||||
path: "{{ access_path }}"
|
||||
entry: "user:{{ item }}:rwx"
|
||||
state: present
|
||||
recursive: true
|
||||
loop:
|
||||
- "{{ execution_user }}"
|
||||
- tripleo-admin
|
Loading…
Reference in New Issue