From a483c5eae1c147d1bfe23b6de90400ae6a3fcae9 Mon Sep 17 00:00:00 2001 From: phermeys Date: Sun, 26 Oct 2025 15:20:41 -0700 Subject: [PATCH] remove depreciated user auth role --- roles/user_check/defaults/main.yaml | 7 --- roles/user_check/tasks/main.yaml | 7 --- roles/user_check/tasks/user_check.yaml | 71 -------------------------- 3 files changed, 85 deletions(-) delete mode 100644 roles/user_check/defaults/main.yaml delete mode 100644 roles/user_check/tasks/main.yaml delete mode 100644 roles/user_check/tasks/user_check.yaml diff --git a/roles/user_check/defaults/main.yaml b/roles/user_check/defaults/main.yaml deleted file mode 100644 index 57266e8..0000000 --- a/roles/user_check/defaults/main.yaml +++ /dev/null @@ -1,7 +0,0 @@ ---- - - -ip_check_folder: "/opt/cosmos/ip_check" - - -... \ No newline at end of file diff --git a/roles/user_check/tasks/main.yaml b/roles/user_check/tasks/main.yaml deleted file mode 100644 index f1adf0d..0000000 --- a/roles/user_check/tasks/main.yaml +++ /dev/null @@ -1,7 +0,0 @@ ---- - -- name: Subnet Security Check - #when: 'SERVER_SUBNET_GROUP not in subnet_group_check' - include_tasks: user_check.yaml - -... \ No newline at end of file diff --git a/roles/user_check/tasks/user_check.yaml b/roles/user_check/tasks/user_check.yaml deleted file mode 100644 index 93eff04..0000000 --- a/roles/user_check/tasks/user_check.yaml +++ /dev/null @@ -1,71 +0,0 @@ ---- -- name: user check - delegate_to: localhost - block: - - - name: show user vars - debug: - msg: - - "User email:" - - "{{ jenkins_user}}" - - "Jenkins Group:" - - "{{ jenkins_group}}" - - "SERVER_SUBNET_GROUP:" - - "{{ SERVER_SUBNET_GROUP }}" - - "subnet_group_check:" - - "{{ subnet_group_check }}" - - "Host IP:" - - "{{ ansible_ssh_host }}" - - # Create venv Folder - - name: create ip venv folder - file: - path: "{{ ip_check_folder }}" - state: directory - #mode: '0755' - - # Copy venv files - - name: copy ip venv files - copy: - src: subnet_check/ - dest: "{{ ip_check_folder }}" - #mode: 0644 - - - name: extract venv - unarchive: - src: /var/jenkins_home/ansible-files/programs/ip_check_venv.tar.gz - dest: "{{ ip_check_folder }}" - #mode: 0644 - - ## build venv - ## commenting and using pre-made archived env to save time - #- name: build venv - # pip: - # virtualenv: "{{ ip_check_folder }}/venv" - # requirements: "{{ ip_check_folder }}/requirements.txt" - # virtualenv_command: python3 -m venv - # state: present - - # check if IP is restricted - - name: check for restricted IP - shell: "{{ ip_check_folder }}/venv/bin/python {{ ip_check_folder }}/ip_check.py {{ ansible_ssh_host }}" - args: - chdir: "{{ ip_check_folder }}" - register: restricted_ip_check - - - name: display output of this - debug: - msg: - - "{{ restricted_ip_check.cmd }}" - - "{{ restricted_ip_check.stdout_lines }}" - - - name: end play if not admin - when: restricted_ip_check.stdout_lines[0] | bool - block: - - - name: display warning - debug: - msg: "Warning: Your user account is not authorized to run playbooks on this subnet." - - meta: end_play - -... \ No newline at end of file