Skip to content

test: ensure role gathers the facts it uses by having test clear_facts before include_role#106

Merged
richm merged 1 commit intolinux-system-roles:mainfrom
richm:clear_facts
Mar 20, 2026
Merged

test: ensure role gathers the facts it uses by having test clear_facts before include_role#106
richm merged 1 commit intolinux-system-roles:mainfrom
richm:clear_facts

Conversation

@richm
Copy link
Contributor

@richm richm commented Mar 19, 2026

The role gathers the facts it uses. For example, if the user uses
ANSIBLE_GATHERING=explicit, the role uses the setup module with the
facts and subsets it requires.

This change allows us to test this. Before every role invocation, the test
will use meta: clear_facts so that the role starts with no facts.

Create a task file tests/tasks/run_role_with_clear_facts.yml to do the tasks
to clear the facts and run the role. Note that this means we don't need to
use gather_facts for the tests.

Some vars defined using ansible_facts have been changed to be defined with
set_fact instead. This is because of the fact that vars are lazily
evaluated - the var might be referenced when the facts have been cleared, and
will issue an error like ansible_facts["distribution"] is undefined. This is
typically done for blocks that have a when condition that uses ansible_facts
and the block has a role invocation using run_role_with_clear_facts.yml
These have been rewritten to define the when condition using set_fact. This
is because the when condition is evaluated every time a task is invoked in the
block, and if the facts are cleared, this will raise an undefined variable error.

Signed-off-by: Rich Megginson rmeggins@redhat.com

Summary by Sourcery

Update sudo role tests to clear Ansible facts before each role execution to verify the role gathers required facts itself.

Tests:

  • Introduce a reusable test task file that clears facts then runs the sudo role, with optional failed_when and tasks_from behavior.
  • Refactor existing sudo role test playbooks to invoke the role via the new task file instead of direct include_role usage.

@richm richm requested a review from spetrosi as a code owner March 19, 2026 23:31
@sourcery-ai
Copy link

sourcery-ai bot commented Mar 19, 2026

Reviewer's Guide

Test playbooks now invoke the sudo role through a shared task file that clears facts before running the role, and this task file also supports an optional "ignore failure" mode via __sr_failed_when semantics, replacing direct include_role usage in tests.

File-Level Changes

Change Details Files
Route all test role invocations through a shared helper that clears facts before running the sudo role.
  • Replace direct include_role calls to linux-system-roles.sudo in test playbooks with include_tasks calls to a new helper task file.
  • Remove explicit gather_facts settings from test playbooks, relying instead on the role to gather the facts it needs.
  • Ensure all relevant tests now execute the sudo role via the same pre-cleared-facts path to validate fact-gathering behavior.
tests/tests_check_if_configured.yml
tests/tests_default.yml
tests/tests_scan_sudoers.yml
tests/tests_large_configuration.yml
tests/tests_multiple_sudoers.yml
tests/tests_role_applied.yml
tests/tests_include_vars_from_parent.yml
Introduce tests/tasks/run_role_with_clear_facts.yml to clear facts and run the sudo role with optional failure-handling semantics.
  • Add a meta: clear_facts task executed before every role invocation to guarantee the role starts with no facts.
  • Wrap include_role execution in a block/rescue to emulate __sr_failed_when=false behavior, swallowing failures when requested.
  • Provide a normal include_role path gated by __sr_failed_when
d(true) to preserve default failure behavior.
  • Parameterize the helper with __sr_tasks_from and __sr_public so tests can control which tasks file to run and whether to export private vars.

  • Tips and commands

    Interacting with Sourcery

    • Trigger a new review: Comment @sourcery-ai review on the pull request.
    • Continue discussions: Reply directly to Sourcery's review comments.
    • Generate a GitHub issue from a review comment: Ask Sourcery to create an
      issue from a review comment by replying to it. You can also reply to a
      review comment with @sourcery-ai issue to create an issue from it.
    • Generate a pull request title: Write @sourcery-ai anywhere in the pull
      request title to generate a title at any time. You can also comment
      @sourcery-ai title on the pull request to (re-)generate the title at any time.
    • Generate a pull request summary: Write @sourcery-ai summary anywhere in
      the pull request body to generate a PR summary at any time exactly where you
      want it. You can also comment @sourcery-ai summary on the pull request to
      (re-)generate the summary at any time.
    • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
      request to (re-)generate the reviewer's guide at any time.
    • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
      pull request to resolve all Sourcery comments. Useful if you've already
      addressed all the comments and don't want to see them anymore.
    • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
      request to dismiss all existing Sourcery reviews. Especially useful if you
      want to start fresh with a new review - don't forget to comment
      @sourcery-ai review to trigger a new review!

    Customizing Your Experience

    Access your dashboard to:

    • Enable or disable review features such as the Sourcery-generated pull request
      summary, the reviewer's guide, and others.
    • Change the review language.
    • Add, remove or edit custom review instructions.
    • Adjust other review settings.

    Getting Help

    @richm
    Copy link
    Contributor Author

    richm commented Mar 19, 2026

    [citest]

    Copy link

    @sourcery-ai sourcery-ai bot left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Hey - I've reviewed your changes and they look great!


    Sourcery is free for open source - if you like our reviews please consider sharing them ✨
    Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

    …s before include_role
    
    The role gathers the facts it uses.  For example, if the user uses
    `ANSIBLE_GATHERING=explicit`, the role uses the `setup` module with the
    facts and subsets it requires.
    
    This change allows us to test this.  Before every role invocation, the test
    will use `meta: clear_facts` so that the role starts with no facts.
    
    Create a task file tests/tasks/run_role_with_clear_facts.yml to do the tasks
    to clear the facts and run the role.  Note that this means we don't need to
    use `gather_facts` for the tests.
    
    Some vars defined using `ansible_facts` have been changed to be defined with
    `set_fact` instead.  This is because of the fact that `vars` are lazily
    evaluated - the var might be referenced when the facts have been cleared, and
    will issue an error like `ansible_facts["distribution"] is undefined`.  This is
    typically done for blocks that have a `when` condition that uses `ansible_facts`
    and the block has a role invocation using run_role_with_clear_facts.yml
    These have been rewritten to define the `when` condition using `set_fact`.  This
    is because the `when` condition is evaluated every time a task is invoked in the
    block, and if the facts are cleared, this will raise an undefined variable error.
    
    Signed-off-by: Rich Megginson <rmeggins@redhat.com>
    @codecov
    Copy link

    codecov bot commented Mar 19, 2026

    Codecov Report

    ✅ All modified and coverable lines are covered by tests.
    ⚠️ Please upload report for BASE (main@6733078). Learn more about missing BASE report.

    Additional details and impacted files
    @@           Coverage Diff           @@
    ##             main     #106   +/-   ##
    =======================================
      Coverage        ?   52.31%           
    =======================================
      Files           ?        1           
      Lines           ?      346           
      Branches        ?        0           
    =======================================
      Hits            ?      181           
      Misses          ?      165           
      Partials        ?        0           

    ☔ View full report in Codecov by Sentry.
    📢 Have feedback on the report? Share it here.

    🚀 New features to boost your workflow:
    • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
    • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

    @richm richm merged commit b269e48 into linux-system-roles:main Mar 20, 2026
    32 checks passed
    @richm richm deleted the clear_facts branch March 20, 2026 11:55
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    None yet

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    1 participant