prevent hardening to create a ceph user on standalone

Signed-off-by: Florent CARLI <[email protected]>
seapath · Feb 27, 2025 · 15a97b2 · 15a97b2
1 parent 78a2757
commit 15a97b2
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/roles/debian_hardening_physical_machine/tasks/main.yml b/roles/debian_hardening_physical_machine/tasks/main.yml
@@ -28,14 +28,18 @@
     owner: root
     group: root
     mode: '0440'
-  when: not revert
+  when:
+    - not revert
+    - cluster_ip_addr is defined
 
 - name: Adding ceph user to group privileged
   user:
     name: "ceph"
     groups: privileged
     append: yes
-  when: not revert
+  when:
+    - not revert
+    - cluster_ip_addr is defined
 
 - name: Adding Debian-snmp user to group privileged
   user:

diff --git a/roles/deploy_cukinia_tests/cukinia-tests b/roles/deploy_cukinia_tests/cukinia-tests
+1 −1		cukinia/hypervisor_security_tests.d/groups.conf.j2
+1 −1		cukinia/hypervisor_security_tests.d/passwd.conf.j2