validation.yaml

---
- name: Playbook Validation
  hosts: localhost
  become: false
  gather_facts: false
  tags: always
  tasks:
    - name: Validate tags
      ansible.builtin.fail:
        msg: |
          Improper usage of '--tags' flag:
          {% set invalid_tags = ansible_run_tags | difference(global_map.tags.role) %}
          {% if invalid_tags | length > 0 %}
            - invalid tag{% if invalid_tags | length > 1 %}s{% endif %}: {{ invalid_tags | join(', ') }}
          {% endif %}
            - valid tags: {{ global_map.tags.role | join(', ') }}
      when:
        - ansible_run_tags not in [(), ('all',)]
        - ansible_run_tags | difference(global_map.tags.role) | length > 0

    - name: Validate version
      ansible.builtin.fail:
        msg: Invalid Ansible version, minimum requirement is '{{ global_map.ansible.version }}'.
      when: ansible_version.full is not version(global_map.ansible.version, '>=')

- name: Cluster Validation
  hosts: cluster
  become: true
  gather_facts: true
  tags: always
  tasks:
    - name: Validate global settings
      ansible.builtin.include_role:
        apply:
          tags: '{{ validation }}'
        name: '{{ validation }}'
        tasks_from: validation
      loop: '{{ global_map.tags.role }}'
      loop_control:
        loop_var: validation
      when: (ansible_run_tags in [(), ('all',)]) or (validation in ansible_run_tags)