# Note (dmsimard) # We explicitely declare a PATH environment variable because '/sbin' is not in # PATH when using 'become: yes' on some distributions - name: Include common tasks include_tasks: file: common.yaml apply: environment: PATH: "{{ ansible_env.PATH }}:/sbin:/usr/sbin" when: >- inventory_hostname in groups['switch'] or inventory_hostname in groups['peers'] - name: Include switch tasks include_tasks: file: switch.yaml apply: environment: PATH: "{{ ansible_env.PATH }}:/sbin:/usr/sbin" when: inventory_hostname in groups['switch'] - name: Include peer tasks include_tasks: file: peer.yaml apply: environment: PATH: "{{ ansible_env.PATH }}:/sbin:/usr/sbin" when: inventory_hostname in groups['peers'] - name: Persist iptables rules include_role: name: persistent-firewall when: >- inventory_hostname in groups['switch'] or inventory_hostname in groups['peers']