Grant sysadmin-osbuild shell and sudo access to osbuild workers
The IPA client groups configuration for osbuild workers was missed in the original PR#1498 [1]. As a result, no member of the `sysadmin-osbuild` FAS group can SSH to the osbuild workers. Set the appropriate IPA client variables to grant access for this group. Also grant access for the `sysadmin-releng` group. There is no specific reason, it just felt sensible since osbuild workers are running in the Fedora infrastructure. [1] https://pagure.io/fedora-infra/ansible/pull-request/1498 Signed-off-by: Tomáš Hozza <thozza@redhat.com>
This commit is contained in:
parent
6279149fb4
commit
7c0bb96714
2 changed files with 16 additions and 0 deletions
|
@ -20,6 +20,14 @@ num_cpus: 2
|
|||
virt_install_command: "{{ virt_install_command_ppc64le_one_nic_unsafe }}"
|
||||
volgroup: /dev/vg_guests
|
||||
|
||||
# setup access to workers
|
||||
ipa_client_shell_groups:
|
||||
- sysadmin-osbuild
|
||||
- sysadmin-releng
|
||||
ipa_client_sudo_groups:
|
||||
- sysadmin-osbuild
|
||||
- sysadmin-releng
|
||||
|
||||
# osbuild worker variables
|
||||
osbuild_worker_server_hostname: "api.openshift.com"
|
||||
osbuild_worker_server_api_base_path: "/api/image-builder-worker/v1"
|
||||
|
|
|
@ -20,6 +20,14 @@ num_cpus: 2
|
|||
virt_install_command: "{{ virt_install_command_ppc64le_one_nic_unsafe }}"
|
||||
volgroup: /dev/vg_guests
|
||||
|
||||
# setup access to workers
|
||||
ipa_client_shell_groups:
|
||||
- sysadmin-osbuild
|
||||
- sysadmin-releng
|
||||
ipa_client_sudo_groups:
|
||||
- sysadmin-osbuild
|
||||
- sysadmin-releng
|
||||
|
||||
# osbuild worker variables
|
||||
osbuild_worker_server_hostname: "api.stage.openshift.com"
|
||||
osbuild_worker_server_api_base_path: "/api/image-builder-worker/v1"
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue