AMW-366 amq_streams collection GitHub action molecule pipelines are breaking because of sudo permission issue

Author: RanabirChakraborty

.github/workflows/ci.yml

@@ -10,9 +10,10 @@ on:
 
 jobs:
   ci:
-    uses: ansible-middleware/github-actions/.github/workflows/ci.yml@main
+    uses: ansible-middleware/github-actions/.github/workflows/ci.yml@rootperm
     secrets: inherit
     with:
       fqcn: 'middleware_automation/amq_streams'
+      root_permission_varname: 'amq_streams_install_requires_become'
       molecule_tests: >-
         [ "default" ]

README.md

@@ -1,6 +1,6 @@
 # Ansible Collection - middleware_automation.amq_streams
 
-[![Build Status](https://github.com/ansible-middleware/amq_streams/workflows/CI/badge.svg?branch=main)](https://github.com/ansible-middleware/amq_streams/actions/workflows/ci.yml)
+[![Build Status](https://github.com/ansible-middleware/amq_streams/workflows/CI/badge.svg)](https://github.com/ansible-middleware/amq_streams/actions/workflows/ci.yml)
 
 Collection to install and configure [Apache Kafka](https://kafka.apache.org/) / [Red Hat AMQ Streams](https://access.redhat.com/documentation/en-us/red_hat_amq_streams).
 

molecule/default/converge.yml

@@ -10,6 +10,8 @@
       - name: otherTopic
         partitions: 4
         replication_factor: 1
+  vars_files:
+    - vars.yml
   roles:
     - role: amq_streams_zookeeper
   tasks:

molecule/default/vars.yml

@@ -0,0 +1,12 @@
+---
+amq_streams_common_escalade_privilege_group_create: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_common_escalade_privilege_user_create: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_common_archive_extraction_requires_privilege_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_common_dependencies_require_priv: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_zookeeper_data_require_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_zookeeper_restart_requires_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_broker_tls_truststore_client_require_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_broker_config_files_requires_privilege_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_cruise_control_path_to_capacity_file_require_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_cruise_control_logfiles_requires_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"
+amq_streams_connect_source_file_require_priv_escalation: "{{ amq_streams_install_requires_become | default(true) }}"

molecule/prepare.yml

@@ -22,7 +22,7 @@
           - sudo_pkg_name in ansible_facts.packages
 
     - name: "Ensure required packages are installed."
-      become: yes
+      become: "{{ amq_streams_install_requires_become | default(true) }}"
       ansible.builtin.yum:
         name:
           - sudo

roles/amq_streams_broker/handlers/main.yml

@@ -3,4 +3,4 @@
   ansible.builtin.service:
     name: "{{ amq_streams_broker.service_name }}"
     state: restarted
-  become: yes
+  become: "{{ amq_streams_install_requires_become | default(true) }}"

roles/amq_streams_common/tasks/firewalld.yml

@@ -7,15 +7,15 @@
     quiet: true
 
 - name: "Ensure firewalld is available."
-  become: true
+  become: "{{ amq_streams_install_requires_become | default(true) }}"
   ansible.builtin.package:
     name: "{{ amq_streams_common_firewalld_package_name }}"
     state: present
   when:
     - firewalld_state_check is not defined or firewalld_state_check
 
 - name: "Ensure firewalld is running."
-  become: true
+  become: "{{ amq_streams_install_requires_become | default(true) }}"
   ansible.builtin.service:
     name: "{{ amq_streams_common_firewalld_service_name | default('firewalld') }}"
     state: started

roles/amq_streams_connect/handlers/main.yml

@@ -3,4 +3,4 @@
   ansible.builtin.service:
     name: "{{ amq_streams_connect_service_name }}"
     state: restarted
-  become: yes
+  become: "{{ amq_streams_install_requires_become | default(true) }}"

roles/amq_streams_cruise_control/handlers/main.yml

@@ -3,13 +3,13 @@
   ansible.builtin.service:
     name: "{{ amq_streams_cruise_control_service_name }}"
     state: restarted
-  become: yes
+  become: "{{ amq_streams_install_requires_become | default(true) }}"
 
 - name: "Stop {{ amq_streams_cruise_control_service_name }}"
   ansible.builtin.service:
     name: "{{ amq_streams_cruise_control_service_name }}"
     state: stopped
-  become: yes
+  become: "{{ amq_streams_install_requires_become | default(true) }}"
 
 - name: "Refresh capacity.json"
   ansible.builtin.include_tasks: capacity.yml

roles/amq_streams_exporter/handlers/main.yml

@@ -3,4 +3,4 @@
   ansible.builtin.service:
     name: "{{ amq_streams_exporter_service_name }}"
     state: restarted
-  become: yes
+  become: "{{ amq_streams_install_requires_become | default(true) }}"