--- # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. - name: create the system group group: name: "{{ sahara_system_group_name }}" state: "present" system: "yes" - name: Create the sahara system user user: name: "{{ sahara_system_user_name }}" group: "{{ sahara_system_group_name }}" comment: "{{ sahara_system_comment }}" shell: "{{ sahara_system_shell }}" system: "yes" createhome: "yes" home: "{{ sahara_system_user_home }}" - name: Create sahara dir file: path: "{{ item.path }}" state: directory owner: "{{ item.owner|default(sahara_system_user_name) }}" group: "{{ item.group|default(sahara_system_group_name) }}" mode: "{{ item.mode|default('0755') }}" with_items: - { path: "/openstack", mode: "0755", owner: "root", group: "root" } - { path: "/etc/sahara" } - { path: "/etc/sahara/rootwrap.d", owner: "root", group: "root" } - { path: "/etc/sudoers.d", mode: "0750", owner: "root", group: "root" } - { path: "/var/cache/sahara" } - { path: "{{ sahara_system_user_home }}" } - name: Test for log directory or link shell: | if [ -h "/var/log/sahara" ]; then chown -h {{ sahara_system_user_name }}:{{ sahara_system_group_name }} "/var/log/sahara" chown -R {{ sahara_system_user_name }}:{{ sahara_system_group_name }} "$(readlink /var/log/sahara)" else exit 1 fi register: log_dir failed_when: false changed_when: log_dir.rc != 0 - name: Create sahara log dir file: path: "/var/log/sahara" state: directory owner: "{{ sahara_system_user_name }}" group: "{{ sahara_system_group_name }}" mode: "0755" when: log_dir.rc != 0 - name: Drop sudoers file template: src: "sudoers.j2" dest: "/etc/sudoers.d/{{ sahara_system_user_name }}_sudoers" mode: "0440" owner: "root" group: "root"