sam/ansible-automation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove ansible_become from inventory to fix delegate_to: localhost inheritance

Browse Source 
ansible_become: true in host inventory vars leaks into delegate_to: localhost
tasks in Ansible 2.18, causing those tasks to try sudo on the Semaphore
runner (which has no sudo). Instead, become: true is set at the play level
in the playbook where needed, which does NOT propagate to delegated tasks.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
sam 2026-03-01 01:02:27 -07:00
parent 9c56789951
commit b8dde7f2ca
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
inventory/hosts.yml
View File

@ -1,5 +1,9 @@
# Targeted inventory — first Docker discovery run # Targeted inventory — first Docker discovery run
# 5 hosts manually selected for initial credential testing # 5 hosts manually selected for initial credential testing
#
# NOTE: become is NOT set here — play-level become: true in the playbook
# handles privilege escalation. This prevents ansible_become: true from
# leaking into delegate_to: localhost tasks on the Semaphore runner.
all: all:
hosts: hosts:
@ -9,28 +13,24 @@ all:
ansible_host: 10.40.40.2 ansible_host: 10.40.40.2
ansible_user: sam ansible_user: sam
ansible_ssh_pass: Lewiss4224@@@ ansible_ssh_pass: Lewiss4224@@@
ansible_become: true
ansible_become_pass: Lewiss4224@@@ ansible_become_pass: Lewiss4224@@@
ubuntu-server-02: ubuntu-server-02:
ansible_host: 10.40.40.3 ansible_host: 10.40.40.3
ansible_user: sam ansible_user: sam
ansible_ssh_pass: Lewiss4224@@@ ansible_ssh_pass: Lewiss4224@@@
ansible_become: true
ansible_become_pass: Lewiss4224@@@ ansible_become_pass: Lewiss4224@@@
sp-ie-containerlab: sp-ie-containerlab:
ansible_host: 10.40.40.156 ansible_host: 10.40.40.156
ansible_user: user ansible_user: user
ansible_ssh_pass: user ansible_ssh_pass: user
ansible_become: true
ansible_become_pass: user ansible_become_pass: user
vRouter-Host: vRouter-Host:
ansible_host: 10.40.40.184 ansible_host: 10.40.40.184
ansible_user: user ansible_user: user
ansible_ssh_pass: user ansible_ssh_pass: user
ansible_become: true
ansible_become_pass: user ansible_become_pass: user
# ── 192.168.1.0/24 ───────────────────────────────────────────────────── # ── 192.168.1.0/24 ─────────────────────────────────────────────────────
@ -38,7 +38,6 @@ all:
ansible_host: 192.168.1.30 ansible_host: 192.168.1.30
ansible_user: user ansible_user: user
ansible_ssh_pass: user ansible_ssh_pass: user
ansible_become: true
ansible_become_pass: user ansible_become_pass: user
children: children: