Add ability to define a Default Role (ansible-ThoTeam#401)

Support for default role capability --------- Co-authored-by: Olivier Clavel <[email protected]>
sebthauvette · Jan 9, 2024 · acb8dd6 · acb8dd6
1 parent 579b530
commit acb8dd6
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -537,6 +537,12 @@ Those items are combined with the following default values :
         roles: [] # references to other role names
 ```
 
+Besides creating roles, it's also possible to define a default role which will be applied to users and anonymous requests when Nexus can not find or map the according role. Default role can be defined using:
+
+```yaml
+nexus_default_role: "developers" # uses the 'developers' role to all users/requests without an explicitly assigned role. Default: ""
+```
+
 List of the [roles](https://help.sonatype.com/display/NXRM3/Roles) to setup.
 
 ### Users

diff --git a/defaults/main.yml b/defaults/main.yml
@@ -211,6 +211,9 @@ nexus_privileges:
       - read
       - browse
 
+# You can set a default role to be used with anonymous access for example
+nexus_default_role: ""
+
 nexus_roles:
   - id: developers # can map to a LDAP group id, also used as a key to update a role
     name: developers

diff --git a/tasks/main.yml b/tasks/main.yml
@@ -267,6 +267,16 @@
       capability_enabled: "{{ nexus_log4j_visualizer_enabled | bool }}"
       capability_properties: {}
 
+- name: Configure Default Role capability
+  ansible.builtin.include_tasks: call_script.yml
+  vars:
+    script_name: setup_capability
+    call_args:
+      capability_typeId: defaultrole
+      capability_enabled: "{{ (nexus_default_role | length > 0) }}"
+      capability_properties:
+        role: "{{ nexus_default_role }}"
+
 - name: Define backup task if backup is configured
   ansible.builtin.set_fact:
     _nexus_backup_task: