infra-ansible

commit 8d0f4008e6c03146fddc8b3d10d656f8d0554dc7
parent af6c12824983080751ebfd3057ff86e79e1abc64
Author: Jul <jul@9o.is>
Date:   Mon, 13 May 2024 19:45:31 +0800

always escalate privilege

Diffstat:
M
host/ansible.cfg
 | 
3
+++
M
host/site.yml
 | 
2
--

2 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/host/ansible.cfg b/host/ansible.cfg
@@ -5,3 +5,6 @@ vault_password_file = contrib/vault-password.sh
 [diff]
 always = true
 
+[privilege_escalation]
+become = true
+
diff --git a/host/site.yml b/host/site.yml
@@ -18,7 +18,6 @@
 - name: Firewall
   hosts: servers
   remote_user: user
-  become: true
   tags: firewall
   roles:
     - iptables
@@ -27,7 +26,6 @@
 - name: Kubernetes
   hosts: servers
   remote_user: user
-  become: true
   tags: kubes
   roles:
     - k0s