feat: add task fields only_groups and skip_groups

Author: fgouteroux

docs/README.md

@@ -496,8 +496,8 @@ playbook:
         sudo: false
   tasks:
     - name: OS-specific Task
-      command: echo "Running on {{.puppet_facts.os.name}}"
-      when: "{{.puppet_facts.os.family}} == RedHat"
+      command: echo "Running on {% raw %}{{.puppet_facts.os.name}}{% endraw %}"
+      when: "{% raw %}{{.puppet_facts.os.family}} == RedHat{% endraw %}"
 ```
 
 #### Collector Configuration
@@ -517,26 +517,26 @@ Facts are available as variables in your tasks, using the collector name as the
 ##### Basic Usage
 ```yaml
 - name: Show OS Information
-  command: echo "Running on {{.puppet_facts.os.name}} {{.puppet_facts.os.release.full}}"
+  command: echo "Running on {% raw %}{{.puppet_facts.os.name}} {{.puppet_facts.os.release.full}}{% endraw %}"
 ```
 
 ##### Conditional Execution
 ```yaml
 - name: Debian-specific Task
   command: apt-get update
-  when: "{{.puppet_facts.os.family}} == Debian"
+  when: "{% raw %}{{.puppet_facts.os.family}} == Debian{% endraw %}"
   
 - name: RedHat-specific Task
   command: yum update
-  when: "{{.puppet_facts.os.family}} == RedHat"
+  when: "{% raw %}{{.puppet_facts.os.family}} == RedHat{% endraw %}"
 ```
 
 ##### Nested Facts
 
 Facts can have nested structures, which can be accessed using dot notation:
 ```yaml
 - name: Show Memory Information
-  command: echo "Total memory: {{.puppet_facts.memory.system.total}}"
+  command: echo "Total memory: {% raw %}{{.puppet_facts.memory.system.total}}{% endraw %}"
 ```
 
 #### Using Puppet Facter
@@ -609,11 +609,11 @@ facts:
 Access the facts in your tasks:
 ```yaml
 - name: Show Application Status
-  command: echo "App version {{.app_status.version}} is {{.app_status.status}}"
+  command: echo "App version {% raw %}{{.app_status.version}} is {{.app_status.status}}{% endraw %}"
   
 - name: Restart if Connections Too High
   command: systemctl restart myapp
-  when: "{{.app_status.connections}} > 100"
+  when: "{% raw %}{{.app_status.connections}}{% endraw %} > 100"
 ```
 
 #### Troubleshooting
@@ -640,7 +640,7 @@ If jq reports errors, your JSON is not valid.
 
 If you have complex nested facts, you can use the dot notation to access nested values:
 ```
-{{.puppet_facts.networking.interfaces.eth0.ip}}
+{% raw %}{{.puppet_facts.networking.interfaces.eth0.ip}}{% endraw %}
 ```
 
 #### Examples
@@ -664,7 +664,7 @@ playbook:
         sudo: true
   tasks:
     - name: Show System Information
-      command: echo "Host: {{.system.networking.hostname}}, OS: {{.system.os.name}} {{.system.os.release.full}}, CPU: {{.system.processors.models.0}}, RAM: {{.system.memory.system.total}}"
+      command: echo "Host: {% raw %}{{.system.networking.hostname}}, OS: {{.system.os.name}} {{.system.os.release.full}}, CPU: {{.system.processors.models.0}}, RAM: {{.system.memory.system.total}}{% endraw %}"
 ```
 
 ##### OS-Specific Deployment
@@ -690,12 +690,12 @@ playbook:
     - name: Install Dependencies (Debian)
       command: apt-get install -y nginx nodejs
       sudo: true
-      when: "{{.os_info.os.family}} == Debian"
+      when: "{% raw %}{{.os_info.os.family}}{% endraw %} == Debian"
       
     - name: Install Dependencies (RedHat)
       command: yum install -y nginx nodejs
       sudo: true
-      when: "{{.os_info.os.family}} == RedHat"
+      when: "{% raw %}{{.os_info.os.family}}{% endraw %} == RedHat"
       
     - name: Deploy Application
       command: /usr/local/bin/deploy.sh
@@ -757,6 +757,31 @@ groups:
     hosts: [...]
 ```
 
+### Task Group Restrictions
+
+Restrict tasks to specific groups:
+```yaml
+tasks:
+  - name: Database Backup
+    command: /usr/local/bin/backup-db.sh
+    sudo: true
+    only_groups: [database]
+    
+  - name: Web Server Config
+    command: /etc/nginx/sites-available/default
+    sudo: true
+    only_groups: [webserver]
+    
+  - name: Update All Servers
+    command: apt-get update
+    sudo: true
+    # No only_groups, runs on all hosts
+    
+  - name: Test Environment Only
+    command: /usr/local/bin/test-feature.sh
+    skip_groups: [production]
+```
+
 ### Retries and Error Handling
 ```yaml
 tasks:

executor.go

@@ -126,6 +126,41 @@ func (e *Executor) ExecuteTask(task Task) error {
 		writer = os.Stdout
 	}
 
+	if execOptions.Verbose {
+		e.mu.Lock()
+		log.SetOutput(writer)
+		log.Printf("[VERBOSE] [%s] Executing task: %s", e.host.Name, task.Name)
+		log.SetOutput(os.Stderr)
+		e.mu.Unlock()
+	}
+
+	// Check if task is restricted to specific groups
+	if len(task.OnlyGroups) > 0 {
+		groupAllowed := false
+		for _, group := range task.OnlyGroups {
+			if group == e.groupName {
+				groupAllowed = true
+				break
+			}
+		}
+		if !groupAllowed {
+			// Skip task, not in allowed groups
+			fmt.Fprintf(writer, "  ⊘ Skipped (not in allowed groups: %v)\n", task.OnlyGroups)
+			return nil
+		}
+	}
+
+	// Check if task should skip specific groups
+	if len(task.SkipGroups) > 0 {
+		for _, group := range task.SkipGroups {
+			if group == e.groupName {
+				// Skip task, in excluded group
+				fmt.Fprintf(writer, "  ⊘ Skipped (in excluded group: %s)\n", group)
+				return nil
+			}
+		}
+	}
+
 	// Check for delegation - if this task is delegated to a different host,
 	// skip it unless we're the delegated host
 	if task.DelegateTo != "" && task.DelegateTo != e.host.Name && task.DelegateTo != "localhost" {
@@ -165,14 +200,6 @@ func (e *Executor) ExecuteTask(task Task) error {
 		runOnceTasks.Unlock()
 	}
 
-	if execOptions.Verbose {
-		e.mu.Lock()
-		log.SetOutput(writer)
-		log.Printf("[VERBOSE] [%s] Executing task: %s", e.host.Name, task.Name)
-		log.SetOutput(os.Stderr)
-		e.mu.Unlock()
-	}
-
 	if len(task.DependsOn) > 0 {
 		for _, dep := range task.DependsOn {
 			if !e.completedTasks[dep] {

playbook.go

@@ -10,7 +10,7 @@ import (
 	"time"
 )
 
-func executeOnHost(host Host, tasks []Task, captureOutput bool) HostResult {
+func executeOnHost(host Host, tasks []Task, captureOutput bool, groupName string) HostResult {
 	var output bytes.Buffer
 	var writer io.Writer = os.Stdout
 
@@ -28,7 +28,7 @@ func executeOnHost(host Host, tasks []Task, captureOutput bool) HostResult {
 	fmt.Fprintf(writer, "%s┌─ Host: %s%s%s (%s)\n", color(ColorCyan), color(ColorBold), host.Name, color(ColorReset), displayTarget)
 	fmt.Fprintf(writer, "%s│%s\n", color(ColorCyan), color(ColorReset))
 
-	executor, err := NewExecutor(host)
+	executor, err := NewExecutor(host, groupName)
 	if err != nil {
 		fmt.Fprintf(writer, "%s│%s %s✗ Connection failed:%s %v\n", color(ColorCyan), color(ColorReset), color(ColorRed), color(ColorReset), err)
 		fmt.Fprintf(writer, "%s└─ ✗ Connection Failed%s\n\n", color(ColorRed), color(ColorReset))
@@ -78,15 +78,15 @@ func executeOnHost(host Host, tasks []Task, captureOutput bool) HostResult {
 	return HostResult{Host: host, Success: true, Error: nil, Output: output.String()}
 }
 
-func executeHostsParallel(hosts []Host, tasks []Task) []HostResult {
+func executeHostsParallel(hosts []Host, tasks []Task, groupName string) []HostResult {
 	var wg sync.WaitGroup
 	resultsChan := make(chan HostResult, len(hosts))
 
 	for _, host := range hosts {
 		wg.Add(1)
 		go func(h Host) {
 			defer wg.Done()
-			result := executeOnHost(h, tasks, true)
+			result := executeOnHost(h, tasks, true, groupName)
 			resultsChan <- result
 		}(host)
 	}
@@ -111,11 +111,11 @@ func executeHostsParallel(hosts []Host, tasks []Task) []HostResult {
 	return results
 }
 
-func executeHostsSequential(hosts []Host, tasks []Task) []HostResult {
+func executeHostsSequential(hosts []Host, tasks []Task, groupName string) []HostResult {
 	var results []HostResult
 
 	for _, host := range hosts {
-		result := executeOnHost(host, tasks, false)
+		result := executeOnHost(host, tasks, false, groupName)
 		results = append(results, result)
 
 		if !result.Success {
@@ -172,9 +172,9 @@ func executeWithGroups(config Config) ([]HostResult, error) {
 		var groupResults []HostResult
 
 		if group.Parallel {
-			groupResults = executeHostsParallel(group.Hosts, config.Playbook.Tasks)
+			groupResults = executeHostsParallel(group.Hosts, config.Playbook.Tasks, group.Name)
 		} else {
-			groupResults = executeHostsSequential(group.Hosts, config.Playbook.Tasks)
+			groupResults = executeHostsSequential(group.Hosts, config.Playbook.Tasks, group.Name)
 		}
 
 		allResults = append(allResults, groupResults...)
@@ -286,9 +286,9 @@ func RunPlaybook(playbookPath string) error {
 		}
 	} else if len(config.Inventory.Hosts) > 0 {
 		if parallel {
-			results = executeHostsParallel(config.Inventory.Hosts, config.Playbook.Tasks)
+			results = executeHostsParallel(config.Inventory.Hosts, config.Playbook.Tasks, "")
 		} else {
-			results = executeHostsSequential(config.Inventory.Hosts, config.Playbook.Tasks)
+			results = executeHostsSequential(config.Inventory.Hosts, config.Playbook.Tasks, "")
 		}
 	} else {
 		return fmt.Errorf("no hosts or groups defined in inventory")

playbook_test.go

@@ -198,7 +198,7 @@ func TestExecuteHostsSequential(t *testing.T) {
 		{Name: "Task1", Command: "echo test"},
 	}
 
-	results := executeHostsSequential(hosts, tasks)
+	results := executeHostsSequential(hosts, tasks, "")
 
 	if len(results) != 2 {
 		t.Errorf("Expected 2 results, got %d", len(results))
@@ -229,7 +229,7 @@ func TestExecuteHostsParallel(t *testing.T) {
 		{Name: "Task2", Command: "echo test2"},
 	}
 
-	results := executeHostsParallel(hosts, tasks)
+	results := executeHostsParallel(hosts, tasks, "")
 
 	if len(results) != 3 {
 		t.Errorf("Expected 3 results, got %d", len(results))
@@ -261,7 +261,7 @@ func TestExecuteOnHost_DryRun(t *testing.T) {
 		{Name: "Task2", Command: "echo world"},
 	}
 
-	result := executeOnHost(host, tasks, false)
+	result := executeOnHost(host, tasks, false, "")
 
 	if !result.Success {
 		t.Errorf("executeOnHost should succeed in dry-run, got error: %v", result.Error)

ssh.go

@@ -14,7 +14,7 @@ import (
 	"golang.org/x/crypto/ssh/knownhosts"
 )
 
-func NewExecutor(host Host) (*Executor, error) {
+func NewExecutor(host Host, groupName string) (*Executor, error) {
 	if execOptions.Verbose {
 		log.Printf("[VERBOSE] Connecting to host: %s", host.Name)
 	}
@@ -141,6 +141,7 @@ func NewExecutor(host Host) (*Executor, error) {
 			variables:      vars,
 			registers:      make(map[string]string),
 			completedTasks: make(map[string]bool),
+			groupName:      groupName,
 			outputWriter:   os.Stdout,
 			startTime:      time.Now(),
 		}, nil
@@ -161,6 +162,7 @@ func NewExecutor(host Host) (*Executor, error) {
 		variables:      host.Vars,
 		registers:      make(map[string]string),
 		completedTasks: make(map[string]bool),
+		groupName:      groupName,
 		outputWriter:   os.Stdout,
 		startTime:      time.Now(),
 	}, nil

ssh_test.go

@@ -69,7 +69,7 @@ func TestNewExecutor_DryRun(t *testing.T) {
 		Port:     22,
 	}
 
-	executor, err := NewExecutor(host)
+	executor, err := NewExecutor(host, "")
 	if err != nil {
 		t.Fatalf("NewExecutor failed in dry-run: %v", err)
 	}
@@ -116,7 +116,7 @@ func TestNewExecutor_NoAddress(t *testing.T) {
 		// No address or hostname
 	}
 
-	_, err := NewExecutor(host)
+	_, err := NewExecutor(host, "")
 	if err == nil {
 		t.Error("NewExecutor should fail with no address")
 	}
@@ -144,7 +144,7 @@ func TestNewExecutor_NoAuthMethod(t *testing.T) {
 		// No password, key file, or agent
 	}
 
-	_, err := NewExecutor(host)
+	_, err := NewExecutor(host, "")
 	if err == nil {
 		t.Error("NewExecutor should fail with no auth method")
 	}
@@ -164,7 +164,7 @@ func TestNewExecutor_WithPassword(t *testing.T) {
 		Password: "testpass",
 	}
 
-	executor, err := NewExecutor(host)
+	executor, err := NewExecutor(host, "")
 	if err != nil {
 		t.Fatalf("NewExecutor with password failed: %v", err)
 	}
@@ -198,7 +198,7 @@ func TestNewExecutor_UseAgentEnabled(t *testing.T) {
 	}
 
 	// This should fail because use_agent is true but no agent is available
-	_, err := NewExecutor(host)
+	_, err := NewExecutor(host, "")
 	if err == nil {
 		t.Error("NewExecutor should fail when use_agent is true but no agent available")
 	}
@@ -220,7 +220,7 @@ func TestNewExecutor_HostnameInsteadOfAddress(t *testing.T) {
 		Password: "testpass",
 	}
 
-	executor, err := NewExecutor(host)
+	executor, err := NewExecutor(host, "")
 	if err != nil {
 		t.Fatalf("NewExecutor with hostname failed: %v", err)
 	}

types.go

@@ -108,6 +108,8 @@ type Task struct {
 	Sudo             bool                   `yaml:"sudo,omitempty"`
 	When             string                 `yaml:"when,omitempty"`
 	Register         string                 `yaml:"register,omitempty"`
+	OnlyGroups       []string               `yaml:"only_groups,omitempty"`
+	SkipGroups       []string               `yaml:"skip_groups,omitempty"`
 	LocalAction      string                 `yaml:"local_action,omitempty"`
 	DelegateTo       string                 `yaml:"delegate_to,omitempty"`
 	RunOnce          bool                   `yaml:"run_once,omitempty"`
@@ -134,6 +136,7 @@ type Executor struct {
 	variables      map[string]interface{}
 	registers      map[string]string
 	completedTasks map[string]bool
+	groupName      string
 	mu             sync.Mutex
 	outputWriter   io.Writer
 	startTime      time.Time