installation-unprivileged.yml

---

- name: installation-unprivileged
  hosts: testing_hosts_linux
  become: true
  gather_facts: yes

  pre_tasks:
    - name: Initial cleanup
      include_role:
        name: caos.ansible_roles.infra_agent
      vars:
        uninstall: true

  tasks:
    - name: Installation tests suite
      vars:
        agent_user: "nri-agent"
        bin_mode: "0755"
        env_vars:
          NRIA_MODE: UNPRIVILEGED

      block:

      - name: install agent
        include_role:
          name: caos.ansible_roles.infra_agent
        vars:
          repo_endpoint: "http://nr-downloads-ohai-staging.s3-website-us-east-1.amazonaws.com/infrastructure_agent"

      - name: assert no privileged caps
        include_role:
          name: caos.ansible_roles.assert_privileged_caps
        vars:
          executable: "/usr/bin/newrelic-infra"
          caps: []

      - name: Assert rootless
        include_role:
          name: caos.ansible_roles.assert_files
        vars:
          processes:
            - name: newrelic-infra-service
              owner: "{{ agent_user }}"
          files:
            - name: /usr/bin/newrelic-infra
              permissions: "{{ bin_mode }}"
...