From 773e0259392b9c146aa4c7f358af749f8ca500db Mon Sep 17 00:00:00 2001 From: Nils Philippsen Date: Mon, 25 Jan 2021 13:50:29 +0100 Subject: [PATCH] bastion: Remove access for `modularity-wg` group We have `sysadmin-mbs` now which should cover all people needing access. Signed-off-by: Nils Philippsen --- inventory/group_vars/bastion | 4 +--- inventory/group_vars/bastion_stg | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion index e6089bd5fe..a1c09923ce 100644 --- a/inventory/group_vars/bastion +++ b/inventory/group_vars/bastion @@ -21,9 +21,7 @@ custom_rules: [ # # allow a bunch of sysadmin groups here so they can access internal stuff -# TODO - remove modularity-wg membership here once it is not longer needed: -# https://fedorahosted.org/fedora-infrastructure/ticket/5363 -fas_client_groups: sysadmin-analysis,sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs,sysadmin-odcs,sysadmin-kernel +fas_client_groups: sysadmin-analysis,sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs,sysadmin-odcs,sysadmin-kernel # # This is a postfix gateway. This will pick up gateway postfix config in base diff --git a/inventory/group_vars/bastion_stg b/inventory/group_vars/bastion_stg index 63a24ac14c..ab4f65e5f1 100644 --- a/inventory/group_vars/bastion_stg +++ b/inventory/group_vars/bastion_stg @@ -21,9 +21,7 @@ custom_rules: [ # # allow a bunch of sysadmin groups here so they can access internal stuff -# TODO - remove modularity-wg membership here once it is not longer needed: -# https://fedorahosted.org/fedora-infrastructure/ticket/5363 -fas_client_groups: sysadmin-analysis,sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs,sysadmin-odcs +fas_client_groups: sysadmin-analysis,sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs,sysadmin-odcs # Disable mail stuff in stg fas_aliases: false