infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

releng sudoe cleanup

Browse source 
move releng-sudoers to 00releng-sudoers everywhere
drop the no longer needed ftpsync-sudo file
ansible-priave has some changes to match

Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
This commit is contained in:
Dennis Gilmore 2016-03-17 15:10:10 +00:00
parent c8e5c09575
commit 62a91e95e7
17 changed files with 16 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/bodhi-backend
View file

@ -42,6 +42,6 @@ fedmsg_error_recipients:
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
## XXX - note that the csi_ stuff is kept at the host_vars/ level.

2
inventory/group_vars/bodhi-backend-stg
View file

@ -73,7 +73,7 @@ fedmsg_certs:
- bodhi.updates.fedora.sync
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
# For the MOTD

2
inventory/group_vars/buildarm
View file

@ -1,6 +1,6 @@
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
ansible_ifcfg_blacklist: true
koji_server_url: "http://koji.fedoraproject.org/kojihub"

2
inventory/group_vars/buildhw
View file

@ -1,7 +1,7 @@
---
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
freezes: true
koji_server_url: "http://koji.fedoraproject.org/kojihub"

2
inventory/group_vars/buildppc
View file

@ -21,7 +21,7 @@ virt_install_command: "{{ virt_install_command_two_nic }}"
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
koji_server_url: "http://koji.fedoraproject.org/kojihub"
koji_weburl: "http://koji.fedoraproject.org/koji"

2
inventory/group_vars/buildppcle
View file

@ -20,7 +20,7 @@ virt_install_command: "{{ virt_install_command_two_nic }}"
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
koji_server_url: "http://koji.fedoraproject.org/kojihub"
koji_weburl: "http://koji.fedoraproject.org/koji"

2
inventory/group_vars/buildvm
View file

@ -16,7 +16,7 @@ virt_install_command: "{{ virt_install_command_two_nic }}"
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
koji_server_url: "http://koji.fedoraproject.org/kojihub"
koji_weburl: "http://koji.fedoraproject.org/koji"

2
inventory/group_vars/buildvm-ppc64
View file

@ -14,7 +14,7 @@ dns: 10.5.126.21
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng,sysadmin-secondary
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
virt_install_command: "{{ virt_install_command_one_nic }} --graphics none"

2
inventory/group_vars/buildvm-ppc64le
View file

@ -14,7 +14,7 @@ dns: 10.5.126.21
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng,sysadmin-secondary
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
virt_install_command: "{{ virt_install_command_one_nic }} --graphics none"

2
inventory/group_vars/buildvm-stg
View file

@ -14,7 +14,7 @@ dns: 10.5.126.21
# the host_vars/$hostname file
host_group: kojibuilder
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
datacenter: staging
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid"

2
inventory/group_vars/koji
View file

@ -19,7 +19,7 @@ custom_rules: [
]
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:

2
inventory/group_vars/koji-stg
View file

@ -36,7 +36,7 @@ fedmsg_certs:
# NOTE -- staging mounts read-only
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
koji_server_url: "http://koji.stg.fedoraproject.org/kojihub"
koji_weburl: "http://koji.stg.fedoraproject.org/koji"

2
inventory/group_vars/osbs-stg
View file

@ -7,4 +7,4 @@ num_cpus: 2
tcp_ports: [ 80, 443 ]
fas_client_groups: sysadmin-releng,fi-apprentice
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"

2
inventory/group_vars/sign-bridge
View file

@ -10,4 +10,4 @@ num_cpus: 4
tcp_ports: [ 44333, 44334 ]
fas_client_groups: sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"

2
inventory/host_vars/compose-ppc64-01.ppc.fedoraproject.org
View file

@ -10,7 +10,7 @@ gw: 10.5.129.254
main_bridge: br1
fas_client_groups: sysadmin-noc,sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
host_group: releng

2
inventory/host_vars/compose-ppc64le-01.ppc.fedoraproject.org
View file

@ -10,7 +10,7 @@ gw: 10.5.129.254
main_bridge: br1
fas_client_groups: sysadmin-noc,sysadmin-releng
sudoers: "{{ private }}/files/sudo/releng-sudoers"
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
host_group: releng

5
roles/releng/tasks/main.yml
View file

@ -185,11 +185,6 @@
copy: src="twoweek-updates" dest=/etc/cron.d/twoweek-updates
when: inventory_hostname.startswith('compose-x86-01')
- name: sudoers for ftpsync
copy: src="{{ private }}/files/sudo/ftpsync-sudo" dest=/etc/sudoers.d/ftpsync mode=0440
tags:
- configs
- name: install compose /etc/httpd/conf.d/compose.conf file
copy: >
src="compose.conf"