# Verify passwordless sudo behaviour in various cases.

- name: integration/become/sudo_nopassword.yml
  hosts: test-targets
  any_errors_fatal: true
  tasks:

    - name: Verify we aren't root
      shell: whoami
      register: out

    - assert:
        that:
          - out.stdout != 'root'
        fail_msg: out={{out}}

    - name: Ensure passwordless sudo to root succeeds.
      shell: whoami
      become: true
      become_user: root
      register: out

    - assert:
        that:
          - out.stdout == 'root'
        fail_msg: out={{out}}
  tags:
    - sudo
    - sudo_nopassword