# Verify passwordless sudo behaviour in various cases.

- name: integration/become/sudo_nopassword.yml
  hosts: test-targets
  tasks:

    - name: Verify we aren't root
      shell: whoami
      register: out

    - assert:
        that:
          - out.stdout != 'root'
        fail_msg: |
          out={{ out }}

    - name: Ensure passwordless sudo to root succeeds.
      shell: whoami
      become: true
      become_user: root
      register: out

    - assert:
        that:
          - out.stdout == 'root'
        fail_msg: |
          out={{ out }}
  tags:
    - sudo
    - sudo_nopassword