mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbach
1b2849c104
The group map is built by looping over the discovered MCP servers, so an empty list left the variable undefined and the next task aborted. That list became reachable-empty once discovery narrowed to the providers a run actually deploys. The consuming tasks move into their own file behind one condition rather than taking a default, because an empty result is a different case and not a missing value: defaulting it would reconcile the existing grants against nothing and drop them.
21 lines
900 B
YAML
21 lines
900 B
YAML
---
|
|
- name: "🔍 Resolve {{ application_id }} hosting node + container id"
|
|
ansible.builtin.include_tasks: "{{ lookup('path_absolute', 'roles/sys-svc-compose/tasks/utils/swarm/resolve_host_cid.yml') }}"
|
|
vars:
|
|
resolve_service_key: "{{ entity_name }}"
|
|
resolve_output_prefix: OPENWEBUI
|
|
resolve_compose_cid: "{{ OPENWEBUI_CONTAINER }}"
|
|
|
|
- name: "🔧 Map every discovered MCP server to its role's mcp group"
|
|
ansible.builtin.set_fact:
|
|
openwebui_mcp_groups: >-
|
|
{{ openwebui_mcp_groups | default({})
|
|
| combine({item.id: '/' ~ lookup('rbac_group_path', application_id=item.id, role='mcp')}) }}
|
|
loop: "{{ OPENWEBUI_MCP_SERVERS }}"
|
|
loop_control:
|
|
label: "{{ item.id }}"
|
|
|
|
- name: "🔌 Grant and persist the MCP tool servers this run discovered"
|
|
ansible.builtin.include_tasks: "{{ role_path }}/tasks/utils/mcp_grants.yml"
|
|
when: OPENWEBUI_MCP_SERVERS | length > 0
|