pve-cluster: when-Listen in Anführungszeichen (YAML-Flow-Sequenz)

2026-10-13 17:05:43 +02:00
parent 81602373fc
commit d9b2539dea
4 changed files with 55 additions and 19 deletions
@@ -38,7 +38,7 @@

 - name: Admin-Gruppe darf alles (Administrator auf /)
  ansible.builtin.command: pveum acl modify / --groups {{ knaster_pve.access.admin_group }} --roles Administrator
-  when: ['/', '@' ~ knaster_pve.access.admin_group, 'Administrator'] not in pve_access.acl
+  when: "['/', knaster_pve.access.admin_group, 'Administrator'] not in pve_access.acl"
  changed_when: true

 # Ohne Passwort: das setzt scripts/pve-admin-user.sh vom Laptop (zusammen mit TOTP und Recovery-Keys)
@@ -57,7 +57,7 @@

 - name: Healer darf GPU-VMs im Pool gpu schalten
  ansible.builtin.command: pveum acl modify /pool/gpu --users {{ pve_healer_user }} --roles {{ pve_healer_role }}
-  when: ['/pool/gpu', pve_healer_user, pve_healer_role] not in pve_access.acl
+  when: "['/pool/gpu', pve_healer_user, pve_healer_role] not in pve_access.acl"
  changed_when: true

 - name: Healer-Token lesen