mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
Add tests/lint/repository/test_name_emoji_and_length.py: every Ansible task name and GitHub Actions workflow/job/step name must start with an emoji (first char not 0-9/A-Za-z) and be <= 80 chars. - emit emoji names at the source: cli/build/include generator now writes "🔧 setup <app>" / "🚿 flush handlers after <app>" so generated tasks/groups/*-roles.yml satisfy the convention too - convert existing task/step/job/workflow names to emoji-prefixed, choosing a task-fitting icon per action (📦 install, ✅ ensure, 🔍 probe, 🥾 bootstrap, 🚀 deploy, 🧩 service-module load, ⬇️ checkout, 📂 include-routines, ...) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
---
|
|
- name: "📤 Extract Google reCAPTCHA config from realm dictionary"
|
|
set_fact:
|
|
kc_recaptcha_cfg: >-
|
|
{{
|
|
KEYCLOAK_DICTIONARY_REALM.authenticatorConfig
|
|
| selectattr('alias','equalto','Google reCaptcha')
|
|
| map(attribute='config')
|
|
| first | default({}, true)
|
|
}}
|
|
|
|
- name: "✅ Sanity check: reCAPTCHA config exists in dictionary"
|
|
assert:
|
|
that:
|
|
- kc_recaptcha_cfg | length > 0
|
|
fail_msg: "Google reCAPTCHA config not found in KEYCLOAK_DICTIONARY_REALM.authenticatorConfig."
|
|
when: MODE_ASSERT_LOCAL | bool
|
|
|
|
- name: "⬇️ Fetch executions of 'registration form' flow"
|
|
shell: >
|
|
{{ KEYCLOAK_EXEC_KCADM }} get
|
|
"authentication/flows/registration%20form/executions"
|
|
-r {{ KEYCLOAK_REALM }} --format json
|
|
register: kc_reg_exec
|
|
changed_when: false
|
|
|
|
- name: "📤 Extract reCAPTCHA authenticator config id"
|
|
set_fact:
|
|
kc_recaptcha_cfg_id: >-
|
|
{{
|
|
kc_reg_exec.stdout | kcadm_json
|
|
| selectattr('providerId','equalto','registration-recaptcha-action')
|
|
| map(attribute='authenticationConfig')
|
|
| first | default('')
|
|
}}
|
|
|
|
- name: "🔄 Update Google reCAPTCHA authenticator config from dictionary"
|
|
when: kc_recaptcha_cfg_id | length > 0
|
|
shell: |
|
|
cat <<'JSON' | {{ KEYCLOAK_EXEC_KCADM }} update authentication/config/{{ kc_recaptcha_cfg_id }} -r {{ KEYCLOAK_REALM }} -f -
|
|
{{
|
|
{
|
|
'alias': 'Google reCaptcha',
|
|
'config': kc_recaptcha_cfg
|
|
} | to_json
|
|
}}
|
|
JSON
|
|
register: kc_recaptcha_update
|
|
changed_when: kc_recaptcha_update.rc == 0
|
|
failed_when: kc_recaptcha_update.rc != 0
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|