Add Edge Flow Manager user role (#293)

* Add Edge Flow Manager user role
* Update version_added to 3.1.0 for Edge Flow Manager setup

Signed-off-by: rsuplina <[email protected]>

Author: rsuplina

roles/prereq_efm/README.md

@@ -0,0 +1,53 @@
+# prereq_efm
+
+Set up for efm
+
+This role prepares a host for Edge Flow Manager usage by creating a dedicated system user and group named `efm`. This user is essential for running efm processes with appropriate permissions and isolation. The role can also optionally set up Access Control Lists (ACLs) on TLS entities if required for secure efm communication.
+
+The role will:
+- Create the `efm` system user and group.
+- Configure home directories and other necessary local paths for the `efm` user, if required.
+- Ensure appropriate permissions are set for files and directories related to efm.
+- Configure TLS ACLs to secure efm communication, if needed.
+
+# Requirements
+
+- Root or `sudo` privileges are required on the target host to create system users and groups, and to configure file system permissions and ACLs.
+
+# Dependencies
+
+None.
+
+# Parameters
+
+| Variable | Type | Required | Default | Description |
+| --- | --- | --- | --- | --- |
+| | | | | This role has no configurable parameters. |
+
+# Example Playbook
+
+```yaml
+- hosts: efm_nodes
+  tasks:
+    - name: Set up the Edge Flow Manager user and environment
+      ansible.builtin.import_role:
+        name: cloudera.exe.prereq_efm
+```
+
+# License
+
+```
+Copyright 2025 Cloudera, Inc.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     https://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+```

roles/prereq_efm/meta/argument_specs.yml

@@ -0,0 +1,24 @@
+---
+# Copyright 2025 Cloudera, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+argument_specs:
+  main:
+    short_description: Set up for Edge Flow Manager
+    description:
+      - Set up for Edge Flow Manager usage, notably, create the local C(efm) user.
+      - Optionally, set up ACLs on TLS entities.
+    author: Cloudera Labs
+    version_added: "3.1.0"
+    options: {}

roles/prereq_efm/molecule/default/converge.yml

@@ -0,0 +1,23 @@
+---
+# Copyright 2025 Cloudera, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Converge
+  hosts: all
+  gather_facts: false
+  become: true
+  tasks:
+    - name: Set up for Edge Flow Manager
+      ansible.builtin.import_role:
+        name: cloudera.exe.prereq_efm