Update CIS_rhel7_Benchmark-L1.yml

rdiers · Jan 1, 2020 · 394c7fb · 394c7fb
1 parent aab19d1
commit 394c7fb
Showing 1 changed file with 29 additions and 1 deletion.
diff --git a/CIS_rhel7_Benchmark-L1.yml b/CIS_rhel7_Benchmark-L1.yml
@@ -2,13 +2,41 @@
 - hosts:  all
   become: yes
   become_method: sudo
-  gather_facts: true
+  gather_facts: false
   ignore_errors: true
   ignore_unreachable: true
   vars:
     ignore_errors: true
     ignore_unreachable: true
+  tasks:
+  - name: "Check if the host is reachable"
+    setup:
+    register: setup_status
+    ignore_errors: yes
+    tags:
+      - always
+
+  - name: "Group reachable hosts"
+    group_by: key=reachable
+    ignore_errors: yes
+    when:
+      - setup_status is defined and not setup_status.unreachable is defined
+    tags:
+      - always
+
+- hosts: reachable
+  become: yes
+  become_method: sudo
+  gather_facts: true
+  ignore_errors: false
+  ignore_unreachable: true
+  vars:
+    ignore_errors: false
+    ignore_unreachable: true
     rhel7cis_level1: true
     rhel7cis_level2: false
   roles:
     - role: CIS_rhel7_Benchmark
+  post_tasks:
+    - meta: clear_host_errors
+      when: ignore_unreachable