post_infra.yml

---

- name: Step 002 Post Infrastructure
  hosts: localhost
  connection: local
  become: false
  gather_facts: false
  tags:
    - step002
    - post_infrastructure

  tasks:

    - name: "Step 002 Post Infrastructure"
      ansible.builtin.debug:
        msg: "Step 000 Post Infrastructure"

- name: Step 002 Post Infrastructure regreSSHion Hotfix
  hosts: all:!windows:!network
  become: true
  tags:
    - regresshion_hotfix

  tasks:

    - name: Have facts been gathered?
      when: ansible_facts['ansible_distribution'] is not defined
      ansible.builtin.setup:
        gather_subset:
          - '!all'
          - '!min'
          - 'distribution'

    - name: Fix regreSSHion when RHEL 9 only
      when:
        - ansible_distribution == 'RedHat'
        - ansible_distribution_major_version == '9'
      block:

        - name: Set sshd LoginGraceTime to 0 in /etc/ssh/sshd_config
          ansible.builtin.lineinfile:
            path: /etc/ssh/sshd_config
            regexp: '.*LoginGraceTime.*'
            line: 'LoginGraceTime 0'

        - name: Restart SSH service for regreSSHion fix
          ansible.builtin.service:
            name: sshd
            state: restarted

- name: Run host_workloads for post_infra_workloads
  any_errors_fatal: true
  hosts: all:localhost
  gather_facts: false
  tags:
    - step002
    - post_infrastructure
  tasks:
    - name: Include host_workloads for post_infra
      when:
        - post_infra_workloads is iterable
        - post_infra_workloads is not mapping
        - post_infra_workloads is not string
      vars:
        agnosticd_stage: post_infra
        host_workloads: "{{ post_infra_workloads }}"
      ansible.builtin.include_role:
        name: host_workloads