21 lines
789 B
Python
21 lines
789 B
Python
from ansiblelater.rule import RuleBase
|
|
|
|
|
|
class CheckBecomeUser(RuleBase):
|
|
rid = "ANS115"
|
|
description = "Become should be combined with become_user"
|
|
helptext = "the task has `become` enabled but `become_user` is missing"
|
|
types = ["playbook", "task", "handler"]
|
|
|
|
def check(self, candidate, settings):
|
|
tasks, errors = self.get_normalized_tasks(candidate, settings)
|
|
true_value = [True, "true", "True", "TRUE", "yes", "Yes", "YES"]
|
|
|
|
if not errors:
|
|
gen = (task for task in tasks if "become" in task)
|
|
for task in gen:
|
|
if task["become"] in true_value and "become_user" not in task:
|
|
errors.append(self.Error(task["__line__"], self.helptext))
|
|
|
|
return self.Result(candidate.path, errors)
|