ansible-role-sudo

101 Commits 2 Branches 5 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
volker.raschekandCopilot	c3f714a7c6	fix(tasks)!: stop flushing /etc/sudoers.d Recreating /etc/sudoers.d on every run deleted every drop-in file on the host, not only the ones managed by this role. That removes files shipped by packages or other tooling, such as 90-cloud-init-users on cloud instances, which can lock out the remaining login paths. The task also reported changed on every run and therefore made check mode and CI runs useless for detecting real drift. The directory is now only ensured with its owner, group and permissions. To keep entries removable, each item of sudo_users_sudoers accepts an optional state, which is passed to community.general.sudoers and defaults to present. BREAKING CHANGE: Entries dropped from sudo_users_sudoers are no longer deleted implicitly. Set state: absent on the entry to remove its drop-in file. Co-authored-by: Copilot <copilot@github.com>	2026-09-10 21:41:34 +02:00
volker.raschek	6469d81fcf	fix: rename files to .yaml Ansible Linter / ansible-lint (push) Failing after 17s Details Lint Markdown files / markdown-lint (push) Successful in 4s Details	2025-11-23 16:19:51 +01:00

Author

SHA1

Message

Date

volker.raschekandCopilot

c3f714a7c6

fix(tasks)!: stop flushing /etc/sudoers.d

Recreating /etc/sudoers.d on every run deleted every drop-in file on the host, not only the ones managed by this role.
That removes files shipped by packages or other tooling, such as 90-cloud-init-users on cloud instances, which can lock
out the remaining login paths. The task also reported changed on every run and therefore made check mode and CI runs
useless for detecting real drift.

The directory is now only ensured with its owner, group and permissions. To keep entries removable, each item of
sudo_users_sudoers accepts an optional state, which is passed to community.general.sudoers and defaults to present.

BREAKING CHANGE: Entries dropped from sudo_users_sudoers are no longer deleted implicitly. Set state: absent on the
entry to remove its drop-in file.

Co-authored-by: Copilot <copilot@github.com>

2026-09-10 21:41:34 +02:00

volker.raschek

6469d81fcf

fix: rename files to .yaml

Ansible Linter / ansible-lint (push) Failing after 17s

Details

Lint Markdown files / markdown-lint (push) Successful in 4s

Details

2025-11-23 16:19:51 +01:00