892dc6a095
This change makes unittests jobs usable on read-only environment. Change-Id: I36cfe7e5849687dbed510396a825dc0ec45542b3
19 lines
445 B
YAML
19 lines
445 B
YAML
- name: Check if zuul is sudoer
|
|
command: sudo -n true
|
|
failed_when: false
|
|
register: zuul_is_sudoer
|
|
|
|
- name: Remove sudo access for zuul user.
|
|
become: yes
|
|
file:
|
|
path: /etc/sudoers.d/zuul
|
|
state: absent
|
|
when: zuul_is_sudoer.rc == 0
|
|
|
|
- name: Prove that general sudo access is actually revoked.
|
|
shell: '! sudo -n true'
|
|
tags:
|
|
# We really need shell above, skip warning
|
|
- skip_ansible_lint
|
|
when: zuul_is_sudoer.rc == 0
|