Fix sudoers file upload

playbooks/mlapi_prod.yml

@@ -8,3 +8,13 @@
     - common
     - discern
   sudo: True
+- hosts:
+    - tag_Group_mlapi-bastion_prod
+  vars_files:
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_vars.yml"]
+    - ["{{ secure_dir }}/vars/users.yml"]
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_users.yml"]
+  roles:
+    - common
+  sudo: True
+

playbooks/mlapi_sandbox.yml

@@ -8,3 +8,12 @@
     - common
     - discern
   sudo: True
+- hosts:
+    - tag_Group_mlapi-bastion_sandbox
+  vars_files:
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_vars.yml"]
+    - ["{{ secure_dir }}/vars/users.yml"]
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_users.yml"]
+  roles:
+    - common
+  sudo: True

playbooks/mlapi_stage.yml

@@ -8,3 +8,13 @@
     - common
     - discern
   sudo: True
+- hosts:
+    - tag_Group_mlapi-bastion_stage
+  vars_files:
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_vars.yml"]
+    - ["{{ secure_dir }}/vars/users.yml"]
+    - ["{{ secure_dir }}/vars/mlapi_sandbox_users.yml"]
+  roles:
+    - common
+  sudo: True
+

playbooks/roles/discern/tasks/main.yml

 ---
 - name: update sudoers file with template
-  template: src=sudoers.j2 dest=/etc/sudoers.tmp
-
-- name: copy over sudoers file
-  shell: visudo -q -c -f /etc/sudoers.tmp && cp /etc/sudoers.tmp /etc/sudoers
+  template: src=sudoers.j2 dest=/etc/sudoers owner=root group=root mode=0440
 
 - name: stop all services
   service: name={{item}} state=stopped