c18a206499
Co-authored-by: MKletz <michael.kletz.27@gmail.com> Co-authored-by: Ajay Chenampara <ajay.chenampara@gmail.com> Co-authored-by: dlemons-redhat <69318976+dlemons-redhat@users.noreply.github.com> Co-authored-by: Nicolas Leiva <nicolasleiva@gmail.com> Co-authored-by: benblasco <42140583+benblasco@users.noreply.github.com> Co-authored-by: Benjamin Blasco <bblasco@redhat.com> Co-authored-by: calvingsmith <4283930+calvingsmith@users.noreply.github.com> Co-authored-by: Calvin Smith <calvingsmith@users.noreply.github.com> Co-authored-by: Hicham Mourad <43329991+HichamMourad@users.noreply.github.com>
42 lines
987 B
YAML
42 lines
987 B
YAML
---
|
|
- name: Temporary Sudo
|
|
hosts: "{{ _hosts | default(omit) }}"
|
|
become: true
|
|
gather_facts: false
|
|
vars:
|
|
sudo_cleanup: true
|
|
sudo_user: undef
|
|
sudo_time: 10
|
|
sudo_units: minutes
|
|
|
|
tasks:
|
|
- name: Check if sudo user exists on system
|
|
ansible.builtin.getent:
|
|
database: passwd
|
|
key: "{{ sudo_user }}"
|
|
|
|
- name: Check Cleanup package
|
|
ansible.builtin.yum:
|
|
name: at
|
|
state: present
|
|
|
|
- name: Check Cleanup Service
|
|
ansible.builtin.service:
|
|
name: atd
|
|
state: started
|
|
|
|
- name: Create Sudo Rule
|
|
ansible.builtin.copy:
|
|
dest: "/etc/sudoers.d/{{ sudo_user }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0640"
|
|
content: "{{ sudo_user }} ALL=(ALL) NOPASSWD:ALL"
|
|
|
|
- name: Set Permission Cleanup
|
|
ansible.posix.at:
|
|
command: "rm /etc/sudoers.d/{{ sudo_user }}"
|
|
count: "{{ sudo_time }}"
|
|
units: "{{ sudo_units }}"
|
|
when: sudo_cleanup | bool
|