Files
computer-playbook/roles/web-app-odoo/tasks/06_ldap.yml
kevinveenbirkenbachandClaude Opus 4.8 4039313266 refactor(tasks): enforce and apply a single task-file numbering scheme
Add tests/lint/repository/test_task_file_numbering.py: numbered task
files use exactly two leading digits, a numbered *_core.yml must be
00_core.yml, per directory the numbers are unique/consecutive and start
at 01 (00 with a core file), numbered includes appear in ascending
order, and shared helpers live in tasks/utils/ instead of the numbered
chain.

Apply it across every role: rename NN_core.yml to 00_core.yml with a
consecutive down-shift of the siblings, move letter-suffix children into
a subdirectory named after their parent task, relocate helpers included
from more than one place into tasks/utils/, and update every reference
(include_tasks, path_absolute, .ansible-lint-ignore, requirement docs).
Legacy narration comments in the touched files are deleted; the upstream
xwiki.properties reference block opts out via nocheck. The unused
MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-23 20:01:31 +02:00

50 lines
2.1 KiB
YAML

---
# Configure LDAP authentication for Odoo
# ODOO_LDAP_CONFIG is defined in vars/main.yml
- name: "🔎 Check if LDAP configuration exists"
database_query:
mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
config: "{{ lookup('database', application_id) }}"
query_file: "{{ role_path }}/files/sql/select/res-company-ldap-exists.sql"
named_args:
ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
expect_rows: true
register: ldap_check
- name: "🔄 Update existing LDAP configuration"
database_query:
mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
config: "{{ lookup('database', application_id) }}"
query_file: "{{ role_path }}/files/sql/update/res-company-ldap.sql"
named_args:
sequence: "{{ ODOO_LDAP_CONFIG.sequence }}"
company_id: "{{ ODOO_LDAP_CONFIG.company_id }}"
ldap_server_port: "{{ ODOO_LDAP_CONFIG.ldap_server_port }}"
ldap_binddn: "{{ ODOO_LDAP_CONFIG.ldap_binddn }}"
ldap_password: "{{ ODOO_LDAP_CONFIG.ldap_password }}"
ldap_base: "{{ ODOO_LDAP_CONFIG.ldap_base }}"
ldap_filter: "{{ ODOO_LDAP_CONFIG.ldap_filter }}"
create_user: "{{ ODOO_LDAP_CONFIG.create_user }}"
ldap_tls: "{{ ODOO_LDAP_CONFIG.ldap_tls }}"
ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
when: ldap_check.rows | length > 0
- name: "📁 Create new LDAP configuration"
database_query:
mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
config: "{{ lookup('database', application_id) }}"
query_file: "{{ role_path }}/files/sql/insert-res-company-ldap.sql"
named_args:
sequence: "{{ ODOO_LDAP_CONFIG.sequence }}"
company_id: "{{ ODOO_LDAP_CONFIG.company_id }}"
ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
ldap_server_port: "{{ ODOO_LDAP_CONFIG.ldap_server_port }}"
ldap_binddn: "{{ ODOO_LDAP_CONFIG.ldap_binddn }}"
ldap_password: "{{ ODOO_LDAP_CONFIG.ldap_password }}"
ldap_base: "{{ ODOO_LDAP_CONFIG.ldap_base }}"
ldap_filter: "{{ ODOO_LDAP_CONFIG.ldap_filter }}"
create_user: "{{ ODOO_LDAP_CONFIG.create_user }}"
ldap_tls: "{{ ODOO_LDAP_CONFIG.ldap_tls }}"
when: ldap_check.rows | length == 0