ci: add a varname to switch all become to false, as GH action does no…

…t allow priv escalation anymore
ansible-middleware · Feb 4, 2025 · 4efa5e2 · 4efa5e2
1 parent 111349a
commit 4efa5e2
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -9,6 +9,9 @@ on:
       molecule_tests:
         required: true
         type: string
+      root_permission_varname:
+        required: false
+        type: string
       sanity_includes:
         required: false
         type: string
@@ -213,7 +216,7 @@ jobs:
       - name: Run molecule test
         run: |
           molecule --version
-          molecule test -s ${{ matrix.molecule_test }}
+          molecule test -s ${{ matrix.molecule_test }} -- -e ${{ inputs.root_permission_varname }}=false
         working-directory: ./ansible_collections/${{ inputs.fqcn }}
         env:
           ANSIBLE_VERBOSITY: ${{ inputs.debug_verbosity }}

diff --git a/.github/workflows/cish.yml b/.github/workflows/cish.yml
@@ -9,6 +9,9 @@ on:
       molecule_tests:
         required: true
         type: string
+      root_permission_varname:
+        required: false
+        type: string
       podman_tests_current:
         required: true
         type: string
@@ -219,7 +222,7 @@ jobs:
       - name: Run molecule test
         run: |
           molecule --version
-          molecule test -s ${{ matrix.molecule_test }}
+          molecule test -s ${{ matrix.molecule_test }} -- -e ${{ inputs.root_permission_varname }}=false
         working-directory: ./ansible_collections/${{ inputs.fqcn }}
         env:
           ANSIBLE_VERBOSITY: ${{ inputs.debug_verbosity }}
@@ -267,7 +270,7 @@ jobs:
       - name: Run molecule test
         run: |
           molecule --version
-          molecule test -s ${{ matrix.molecule_test }}
+          molecule test -s ${{ matrix.molecule_test }} -- -e ${{ inputs.root_permission_varname }}=false
         working-directory: ./ansible_collections/${{ inputs.fqcn }}
         env:
           ANSIBLE_REMOTE_TMP: "/tmp-2.15-${{ matrix.molecule_test }}"
@@ -316,7 +319,7 @@ jobs:
       - name: Run molecule test
         run: |
           molecule --version
-          molecule test -s ${{ matrix.molecule_test }}
+          molecule test -s ${{ matrix.molecule_test }} -- -e ${{ inputs.root_permission_varname }}=false
         working-directory: ./ansible_collections/${{ inputs.fqcn }}
         env:
           ANSIBLE_REMOTE_TMP: "/tmp-2.16-${{ matrix.molecule_test }}"