NR-164383 feat: fail if unexpected caps found

newrelic-experimental · Jan 8, 2024 · 7716987 · 7716987
1 parent d01b069
commit 7716987
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/caos.ansible_roles/roles/assert_privileged_caps/tasks/check_Linux.yaml b/caos.ansible_roles/roles/assert_privileged_caps/tasks/check_Linux.yaml
@@ -14,4 +14,10 @@
       - getcap.stdout is search(item)
   loop: "{{ caps }}"
 
+- name: fail if caps are found and were not expected
+  fail:
+    msg: "caps were not expected"
+  when:
+    - caps | length  == 0 and getcap.stdout != ""
+
 ...