Added 2 VIP members to various groups on the new chaperone machines.

group_vars/betabarrel_cluster/vars.yml

@@ -225,27 +225,27 @@ regular_users:
   - user: 'umcg-vipt-dm'
     groups: ['umcg-vipt', "{{ functional_users_group }}"]
 sudoers:
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-ateambot'
     name: 'umcg-atd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-dm'
     name: 'umcg-atd-dm'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-ateambot'
     name: 'umcg-gap-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-dm'
     name: 'umcg-gap-dm'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-ateambot'
     name: 'umcg-gd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-dm'
     name: 'umcg-gd-dm'
     command: 'ALL'
@@ -257,11 +257,11 @@ sudoers:
     become: 'umcg-genomescan-dm'
     name: 'umcg-genomescan-dm'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-ateambot'
     name: 'umcg-gsad-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-dm'
     name: 'umcg-gsad-dm'
     command: 'ALL'
@@ -306,12 +306,22 @@ remote_users_in_local_groups:
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'charbonb'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'cimermans'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'hendriksend'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'langek'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',

group_vars/copperfist_cluster/vars.yml

@@ -225,27 +225,27 @@ regular_users:
   - user: 'umcg-vipt-dm'
     groups: ['umcg-vipt', "{{ functional_users_group }}"]
 sudoers:
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-ateambot'
     name: 'umcg-atd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-dm'
     name: 'umcg-atd-dm'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-ateambot'
     name: 'umcg-gap-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-dm'
     name: 'umcg-gap-dm'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-ateambot'
     name: 'umcg-gd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-dm'
     name: 'umcg-gd-dm'
     command: 'ALL'
@@ -257,11 +257,11 @@ sudoers:
     become: 'umcg-genomescan-dm'
     name: 'umcg-genomescan-dm'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-ateambot'
     name: 'umcg-gsad-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-dm'
     name: 'umcg-gsad-dm'
     command: 'ALL'
@@ -306,12 +306,22 @@ remote_users_in_local_groups:
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'charbonb'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'cimermans'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'hendriksend'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'langek'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',

group_vars/wingedhelix_cluster/vars.yml

@@ -237,27 +237,27 @@ regular_users:
   - user: 'umcg-vipt-dm'
     groups: ['umcg-vipt', "{{ functional_users_group }}"]
 sudoers:
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-ateambot'
     name: 'umcg-atd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-atd']
+  - who: ['%umcg-atd,!charbonb,!hendriksend']
     become: 'umcg-atd-dm'
     name: 'umcg-atd-dm'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-ateambot'
     name: 'umcg-gap-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gap']
+  - who: ['%umcg-gap,!charbonb,!hendriksend']
     become: 'umcg-gap-dm'
     name: 'umcg-gap-dm'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-ateambot'
     name: 'umcg-gd-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gd']
+  - who: ['%umcg-gd,!charbonb,!hendriksend']
     become: 'umcg-gd-dm'
     name: 'umcg-gd-dm'
     command: 'ALL'
@@ -269,11 +269,11 @@ sudoers:
     become: 'umcg-genomescan-dm'
     name: 'umcg-genomescan-dm'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-ateambot'
     name: 'umcg-gsad-ateambot'
     command: 'ALL'
-  - who: ['%umcg-gsad']
+  - who: ['%umcg-gsad,!charbonb,!hendriksend']
     become: 'umcg-gsad-dm'
     name: 'umcg-gsad-dm'
     command: 'ALL'
@@ -318,12 +318,22 @@ remote_users_in_local_groups:
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'charbonb'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'cimermans'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',
         'umcg-gap', 'umcg-gd', 'umcg-genomescan',
         'umcg-labgnkbh', 'umcg-patho', 'umcg-vipt',
     ]
+  - user: 'hendriksend'
+    groups: [
+        "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad',
+        'umcg-gap', 'umcg-gd', 'umcg-vipt',
+    ]
   - user: 'langek'
     groups: [
         "{{ envsync_group }}", 'umcg-atd', 'umcg-gsad', 'umcg-gst',

roles/iptables/handlers/main.yml

@@ -13,6 +13,7 @@
 - name: 'Configure iptables based firewalls (IPv4 and IPv6).'
   ansible.builtin.command:
     cmd: '/etc/sysconfig/iptables-init.bash'
+  changed_when: true
   become: true
   listen: configure_iptables
 ...

roles/ldap/handlers/main.yml

@@ -7,6 +7,7 @@
 - name: Running update-ca-trust when certificates have changed.
   ansible.builtin.command:
     cmd: update-ca-trust extract
+  changed_when: true
   become: true
   listen: update-ca-trust
 
@@ -25,7 +26,9 @@
   listen: restart_sshd
 
 - name: Run authconfig update to enable ldap.
-  ansible.builtin.command: "authconfig --enableldap --enableldapauth --update"
+  ansible.builtin.command:
+    cmd: 'authconfig --enableldap --enableldapauth --update'
+  changed_when: true
   become: true
   listen: authconfig_enable_ldap
 ...

roles/ldap_server/handlers/main.yml

@@ -2,6 +2,7 @@
 - name: Running update-ca-trust when certificates have changed.
   ansible.builtin.command:
     cmd: update-ca-trust extract
+  changed_when: true
   become: true
   listen: update-ca-trust
 

roles/logins/handlers/main.yml

@@ -5,7 +5,9 @@
 # and not in the order in which they are listed in a "notify: handler_name" statement!
 #
 - name: 'Run authconfig update.'
-  ansible.builtin.command: "authconfig --enablemkhomedir --update"
+  ansible.builtin.command:
+    cmd: 'authconfig --enablemkhomedir --update'
+  changed_when: true
   become: true
   listen: authconfig_enable_mkhomedir
 

roles/logins/handlers/update-grub.yml

@@ -11,6 +11,7 @@
          grub2-mkconfig -o '/boot/grub2/grub.cfg'
   args:
     executable: '/bin/bash'
+  changed_when: true
   become: true
   listen: rebuild_grub_config
 

roles/nfs_server/handlers/main.yml

@@ -24,7 +24,9 @@
   listen: reload_nfs-server
 
 - name: '(Re)export all NFS shares.'
-  ansible.builtin.command: 'exportfs -a'
+  ansible.builtin.command:
+    cmd: 'exportfs -a'
+  changed_when: true
   become: true
   listen: export_nfs_shares
 ...

roles/online_docs/handlers/main.yml

@@ -39,6 +39,7 @@
          export LANG='en_US.utf8'
          export PATH="${PATH}:/usr/local/bin/"
          mkdocs build
+  changed_when: true
   become: true
   listen: 'build_mkdocs'
 ...

roles/pulp_client/handlers/main.yml

@@ -2,6 +2,7 @@
 - name: Running update-ca-trust when certificates have changed.
   ansible.builtin.command:
     cmd: update-ca-trust extract
+  changed_when: true
   become: true
   listen: update-ca-trust
 ...

roles/pulp_server/handlers/main.yml

@@ -2,6 +2,7 @@
 - name: Running update-ca-trust when certificates have changed.
   ansible.builtin.command:
     cmd: update-ca-trust extract
+  changed_when: true
   become: true
   listen: update-ca-trust
 ...

roles/sssd/handlers/main.yml

@@ -7,6 +7,7 @@
 - name: Running update-ca-trust when certificates have changed.
   ansible.builtin.command:
     cmd: update-ca-trust extract
+  changed_when: true
   become: true
   listen: update-ca-trust
 
@@ -25,7 +26,9 @@
   listen: restart_sshd
 
 - name: Run authconfig update to enable sssd.
-  ansible.builtin.command: "authconfig --enablesssd --enablesssdauth --update"
+  ansible.builtin.command:
+    cmd: 'authconfig --enablesssd --enablesssdauth --update'
+  changed_when: true
   become: true
   listen: authconfig_enable_sssd
 ...

roles/swap/handlers/main.yml

@@ -7,18 +7,21 @@
 - name: Disable swap file using swapon.
   ansible.builtin.command:
     cmd: swapoff {{ swap_file_path | quote }}
+  changed_when: true
   listen: disable_swap_file
   become: true
 
 - name: Format swap file.
   ansible.builtin.command:
     cmd: mkswap {{ swap_file_path | quote }}
+  changed_when: true
   listen: format_swap_file
   become: true
 
 - name: Enable swap file using swapon.
   ansible.builtin.command:
     cmd: swapon {{ swap_file_path | quote }}
+  changed_when: true
   listen: enable_swap_file
   become: true
 ...

roles/update/handlers/main.yml

@@ -8,6 +8,7 @@
   ansible.builtin.shell:
     cmd: |
          /bin/needs-restarting -r >/dev/null 2>&1 || /sbin/shutdown -r +60 "Restarting to apply updates..."
+  changed_when: true
   become: true
   listen: reboot_for_kernel_update
 ...