mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
cddb0dc59b
Add tests/lint/repository/test_name_emoji_and_length.py: every Ansible task name and GitHub Actions workflow/job/step name must start with an emoji (first char not 0-9/A-Za-z) and be <= 80 chars. - emit emoji names at the source: cli/build/include generator now writes "🔧 setup <app>" / "🚿 flush handlers after <app>" so generated tasks/groups/*-roles.yml satisfy the convention too - convert existing task/step/job/workflow names to emoji-prefixed, choosing a task-fitting icon per action (📦 install, ✅ ensure, 🔍 probe, 🥾 bootstrap, 🚀 deploy, 🧩 service-module load, ⬇️ checkout, 📂 include-routines, ...) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
85 lines
2.5 KiB
YAML
85 lines
2.5 KiB
YAML
---
|
|
#
|
|
# This file is included ONLY when desired_groups_top is non-empty.
|
|
# Do not add an additional "when: desired_groups_top | length > 0" here.
|
|
|
|
- name: ⬇️ Fetch groups (JSON)
|
|
shell: >
|
|
{{ KEYCLOAK_EXEC_KCADM }} get groups -r {{ KEYCLOAK_REALM }} --format json
|
|
register: kc_groups
|
|
changed_when: false
|
|
|
|
- name: 🔍 Resolve existing top-level group id for groups.path
|
|
set_fact:
|
|
groups_top_id: >-
|
|
{{
|
|
(
|
|
kc_groups.stdout | kcadm_json
|
|
| selectattr('name','equalto', desired_groups_top)
|
|
| map(attribute='id')
|
|
| list
|
|
| first
|
|
| default('')
|
|
) | string | trim
|
|
}}
|
|
changed_when: false
|
|
|
|
- name: 📁 Create top-level group for groups.path if missing
|
|
when: groups_top_id in ["", "null"]
|
|
shell: >
|
|
{{ KEYCLOAK_EXEC_KCADM }} create groups -r {{ KEYCLOAK_REALM }} -s name={{ desired_groups_top }}
|
|
register: create_groups_top
|
|
changed_when: create_groups_top.rc == 0
|
|
failed_when: create_groups_top.rc != 0 and ('already exists' not in (create_groups_top.stderr | lower))
|
|
|
|
- name: 🔄 Refresh groups (JSON) after potential create (authoritative)
|
|
shell: >
|
|
{{ KEYCLOAK_EXEC_KCADM }} get groups -r {{ KEYCLOAK_REALM }} --format json
|
|
register: kc_groups_refresh
|
|
changed_when: false
|
|
|
|
- name: 🔄 Refresh existing top-level group id for groups.path (authoritative)
|
|
set_fact:
|
|
groups_top_id: >-
|
|
{{
|
|
(
|
|
kc_groups_refresh.stdout | kcadm_json
|
|
| selectattr('name','equalto', desired_groups_top)
|
|
| map(attribute='id')
|
|
| list
|
|
| first
|
|
| default('')
|
|
) | string | trim
|
|
}}
|
|
changed_when: false
|
|
|
|
- name: ✅ Assert top-level group for groups.path exists now
|
|
when: MODE_ASSERT_LOCAL | bool
|
|
assert:
|
|
that:
|
|
- groups_top_id not in ["", "null"]
|
|
fail_msg: "Top-level group '{{ desired_groups_top }}' for groups.path could not be resolved."
|
|
|
|
- name: 📄 Inject groups.path.group into mapper config (force parent group id)
|
|
set_fact:
|
|
desired_group_mapper: >-
|
|
{{
|
|
desired_group_mapper
|
|
| combine(
|
|
{
|
|
"config": (
|
|
(desired_group_mapper.config | default({}))
|
|
| combine(
|
|
{
|
|
"groups.path": [ desired_groups_path ],
|
|
"groups.path.group": [ groups_top_id ]
|
|
},
|
|
recursive=True
|
|
)
|
|
)
|
|
},
|
|
recursive=True
|
|
)
|
|
}}
|
|
changed_when: false
|