Add sysadmin-veteran everywhere sysadmin-noc is

2017-06-12 03:09:13 +00:00 · 2017-06-12 03:09:13 +00:00 · a6ad9e2c05
commit a6ad9e2c05
parent 14d66ff5af
72 changed files with 76 additions and 76 deletions
--- a/inventory/group_vars/anitya-backend
+++ b/inventory/group_vars/anitya-backend
@ -16,7 +16,7 @@ custom_rules: [
 # No other ports open.  no web service running here.
 #tcp_ports: []

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/anitya-frontend
+++ b/inventory/group_vars/anitya-frontend
@ -18,7 +18,7 @@ custom_rules: [
    '-A INPUT -p tcp -m tcp -s 140.211.169.230 --dport 9941 -j ACCEPT',
 ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 # Don't use testing repos in production
 testing: False
--- a/inventory/group_vars/autocloud-backend
+++ b/inventory/group_vars/autocloud-backend
@ -15,7 +15,7 @@ tcp_ports: [
    3000, 3001, 3002, 3003,
 ]

-fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/autocloud-backend"

 # These are hw boxes and don't use the NM ifconfig setup
--- a/inventory/group_vars/autocloud-backend-stg
+++ b/inventory/group_vars/autocloud-backend-stg
@ -12,7 +12,7 @@ tcp_ports: [
    3000, 3001, 3002, 3003,
 ]

-fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran

 # These people get told when something goes wrong.
 fedmsg_error_recipients:
--- a/inventory/group_vars/autocloud-web
+++ b/inventory/group_vars/autocloud-web
@ -14,7 +14,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran

 # For the MOTD
 csi_security_category: Moderate
--- a/inventory/group_vars/autocloud-web-stg
+++ b/inventory/group_vars/autocloud-web-stg
@ -14,7 +14,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran

 # For the MOTD
 csi_security_category: Moderate
--- a/inventory/group_vars/badges-backend
+++ b/inventory/group_vars/badges-backend
@ -10,7 +10,7 @@ freezes: false
 tcp_ports: [ 3000, 3001, 3002, 3003,
             3004, 3005, 3006, 3007 ]

-fas_client_groups: sysadmin-noc,sysadmin-badges
+fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran

 # These people get told when something goes wrong.
 fedmsg_error_recipients:
--- a/inventory/group_vars/badges-backend-stg
+++ b/inventory/group_vars/badges-backend-stg
@ -10,7 +10,7 @@ num_cpus: 2
 tcp_ports: [ 3000, 3001, 3002, 3003,
             3004, 3005, 3006, 3007 ]

-fas_client_groups: sysadmin-noc,sysadmin-badges
+fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran

 # These people get told when something goes wrong.
 fedmsg_error_recipients:
--- a/inventory/group_vars/badges-web
+++ b/inventory/group_vars/badges-web
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-badges
+fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/badges-web-stg
+++ b/inventory/group_vars/badges-web-stg
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-badges
+fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/bodhi2
+++ b/inventory/group_vars/bodhi2
@ -28,7 +28,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-bodhi
+fas_client_groups: sysadmin-noc,sysadmin-bodhi,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/00releng-sudoers"

 # These set a config value in /etc/fedmsg.d/, see roles/bodhi2/base/
--- a/inventory/group_vars/bodhi2-stg
+++ b/inventory/group_vars/bodhi2-stg
@ -26,7 +26,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-bodhi
+fas_client_groups: sysadmin-noc,sysadmin-bodhi,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/00releng-sudoers"

 host_group: bodhi2
--- a/inventory/group_vars/bugyou
+++ b/inventory/group_vars/bugyou
@ -9,7 +9,7 @@ num_cpus: 2

 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/bugyou-sudoers"

 # For the MOTD
--- a/inventory/group_vars/bugyou-stg
+++ b/inventory/group_vars/bugyou-stg
@ -9,7 +9,7 @@ num_cpus: 1

 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/bugyou-stg-sudoers"

 # For the MOTD
--- a/inventory/group_vars/bugzilla2fedmsg
+++ b/inventory/group_vars/bugzilla2fedmsg
@ -9,7 +9,7 @@ freezes: false

 tcp_ports: [ 3000, 3001, 3002, 3003 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/bugzilla2fedmsg-stg
+++ b/inventory/group_vars/bugzilla2fedmsg-stg
@ -9,7 +9,7 @@ num_cpus: 1

 tcp_ports: [ 3000, 3001 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/busgateway
+++ b/inventory/group_vars/busgateway
@ -15,7 +15,7 @@ tcp_ports: [
    9919,  # The websocket server publishes here.  Proxies need to connect.
 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/busgateway-stg
+++ b/inventory/group_vars/busgateway-stg
@ -14,7 +14,7 @@ tcp_ports: [
    9919,  # The websocket server publishes here.  Proxies need to connect.
 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/fedocal
+++ b/inventory/group_vars/fedocal
@ -15,7 +15,7 @@ tcp_ports: [ 80, 443,
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/fedocal-stg
+++ b/inventory/group_vars/fedocal-stg
@ -15,7 +15,7 @@ tcp_ports: [ 80, 443,
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/github2fedmsg
+++ b/inventory/group_vars/github2fedmsg
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/github2fedmsg-stg
+++ b/inventory/group_vars/github2fedmsg-stg
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/hotness
+++ b/inventory/group_vars/hotness
@ -9,7 +9,7 @@ num_cpus: 2

 tcp_ports: [ 3000, 3001, 3002, 3003 ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/hotness-sudoers"

--- a/inventory/group_vars/hotness-stg
+++ b/inventory/group_vars/hotness-stg
@ -9,7 +9,7 @@ num_cpus: 1

 tcp_ports: [ 3000, 3001, 3002, 3003 ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/hotness-sudoers"

--- a/inventory/group_vars/kerneltest
+++ b/inventory/group_vars/kerneltest
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/kerneltest-stg
+++ b/inventory/group_vars/kerneltest-stg
@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/keys
+++ b/inventory/group_vars/keys
@ -7,4 +7,4 @@ num_cpus: 2
 # the host_vars/$hostname file

 tcp_ports: [ 80, 443, 11370, 11371 ]
-fas_client_groups: sysadmin-noc,sysadmin-keys
+fas_client_groups: sysadmin-noc,sysadmin-keys,sysadmin-veteran
--- a/inventory/group_vars/kojipkgs
+++ b/inventory/group_vars/kojipkgs
@ -13,7 +13,7 @@ custom_rules: [

 tcp_ports: [80, 8080]

-fas_client_groups: sysadmin-releng,sysadmin-noc
+fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran

 varnish_group: kojipkgs

--- a/inventory/group_vars/mbs-backend
+++ b/inventory/group_vars/mbs-backend
@ -12,7 +12,7 @@ freezes: false
 tcp_ports: [ 3000, 3001, 3002, 3003,
             3004, 3005, 3006, 3007 ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # These people get told when something goes wrong.
 fedmsg_error_recipients:
--- a/inventory/group_vars/mbs-backend-stg
+++ b/inventory/group_vars/mbs-backend-stg
@ -12,7 +12,7 @@ freezes: false
 tcp_ports: [ 3000, 3001, 3002, 3003,
             3004, 3005, 3006, 3007 ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # These people get told when something goes wrong.
 fedmsg_error_recipients:
--- a/inventory/group_vars/mbs-frontend
+++ b/inventory/group_vars/mbs-frontend
@ -19,7 +19,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/mbs-frontend-stg
+++ b/inventory/group_vars/mbs-frontend-stg
@ -19,7 +19,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/mdapi
+++ b/inventory/group_vars/mdapi
@ -9,7 +9,7 @@ tcp_ports: [ 80, 8080 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/mdapi-stg
+++ b/inventory/group_vars/mdapi-stg
@ -12,7 +12,7 @@ custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '
 wsgi_procs: 2
 wsgi_threads: 2

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/mm
+++ b/inventory/group_vars/mm
@ -1,6 +1,6 @@
 ---
 # Define resources for this group of hosts here. 
-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/mm2-sudoers"

 mm2_checkin: false
--- a/inventory/group_vars/mm-stg
+++ b/inventory/group_vars/mm-stg
@ -1,6 +1,6 @@
 ---
 # Define resources for this group of hosts here. 
-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/mm2-sudoers"

 mm2_checkin: false
--- a/inventory/group_vars/nagios
+++ b/inventory/group_vars/nagios
@ -22,7 +22,7 @@ fedmsg_certs:
  - nagios.host.state.change
  - nagios.service.state.change

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran
 csi_security_category: High
 csi_primary_contact: Fedora Admins - admin@fedoraproject.org
 csi_purpose: Monitoring system
--- a/inventory/group_vars/nagios-new
+++ b/inventory/group_vars/nagios-new
@ -22,7 +22,7 @@ fedmsg_certs:
  - nagios.host.state.change
  - nagios.service.state.change

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran
 csi_security_category: High
 csi_primary_contact: Fedora Admins - admin@fedoraproject.org
 csi_purpose: Monitoring system
--- a/inventory/group_vars/nagios-new-stg
+++ b/inventory/group_vars/nagios-new-stg
@ -22,7 +22,7 @@ fedmsg_certs:
  - nagios.host.state.change
  - nagios.service.state.change

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran
 csi_security_category: High
 csi_primary_contact: Fedora Admins - admin@fedoraproject.org
 csi_purpose: Monitoring system
--- a/inventory/group_vars/notifs-backend
+++ b/inventory/group_vars/notifs-backend
@ -10,7 +10,7 @@ num_cpus: 8

 tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/notifs-sudoers"

--- a/inventory/group_vars/notifs-backend-stg
+++ b/inventory/group_vars/notifs-backend-stg
@ -10,7 +10,7 @@ num_cpus: 4

 tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/notifs-sudoers"

--- a/inventory/group_vars/notifs-web
+++ b/inventory/group_vars/notifs-web
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/notifs-sudoers"

--- a/inventory/group_vars/notifs-web-stg
+++ b/inventory/group_vars/notifs-web-stg
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 sudoers: "{{ private }}/files/sudo/notifs-sudoers"

--- a/inventory/group_vars/nuancier
+++ b/inventory/group_vars/nuancier
@ -17,7 +17,7 @@ tcp_ports: [ 80,
    6996,
    ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/nuancier-stg
+++ b/inventory/group_vars/nuancier-stg
@ -17,7 +17,7 @@ tcp_ports: [ 80,
    6996,
    ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/osbs-control
+++ b/inventory/group_vars/osbs-control
@ -1,6 +1,6 @@
 ---
 # Define resources for this group of hosts here.
-fas_client_groups: sysadmin-releng,sysadmin-noc
+fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/00releng-sudoers"

 osbs_url: "osbs.fedoraproject.org"
--- a/inventory/group_vars/osbs-control-stg
+++ b/inventory/group_vars/osbs-control-stg
@ -1,6 +1,6 @@
 ---
 # Define resources for this group of hosts here.
-fas_client_groups: sysadmin-releng,sysadmin-noc
+fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/00releng-sudoers"

 osbs_url: "osbs.stg.fedoraproject.org"
--- a/inventory/group_vars/packages
+++ b/inventory/group_vars/packages
@ -18,7 +18,7 @@ tcp_ports: [ 80, 443,
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/packages-stg
+++ b/inventory/group_vars/packages-stg
@ -16,7 +16,7 @@ tcp_ports: [ 80, 443,
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/pagure
+++ b/inventory/group_vars/pagure
@ -56,7 +56,7 @@ fedmsg_certs:
 fedmsg_prefix: io.pagure
 fedmsg_env: prod

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: true
 postfix_group: vpn.pagure
--- a/inventory/group_vars/pagure-stg
+++ b/inventory/group_vars/pagure-stg
@ -53,7 +53,7 @@ fedmsg_certs:
 fedmsg_prefix: io.pagure
 fedmsg_env: stg

-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

 freezes: false
 env: pagure-staging
--- a/inventory/group_vars/pdc-backend
+++ b/inventory/group_vars/pdc-backend
@ -11,7 +11,7 @@ host_group: pdc-backend

 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs,sysadmin-veteran

 # See the host_vars files for the value of fedmsg_error_recipients here

--- a/inventory/group_vars/pdc-backend-stg
+++ b/inventory/group_vars/pdc-backend-stg
@ -11,7 +11,7 @@ host_group: pdc-backend

 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs,sysadmin-veteran

 # See the host_vars files for the value of fedmsg_error_recipients here

--- a/inventory/group_vars/pdc-web
+++ b/inventory/group_vars/pdc-web
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # This just defines the CN of the saml2 cert we pull from the private repo
 # Don't be confused.  The app is actually served at apps.stg.fp.o/pdc
--- a/inventory/group_vars/pdc-web-stg
+++ b/inventory/group_vars/pdc-web-stg
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

 # This just defines the CN of the saml2 cert we pull from the private repo
 # Don't be confused.  The app is actually served at apps.stg.fp.o/pdc
--- a/inventory/group_vars/piwik-stg
+++ b/inventory/group_vars/piwik-stg
@ -5,4 +5,4 @@ mem_size: 8192
 num_cpus: 2

 tcp_ports: [ 80 ]
-fas_client_groups: sysadmin-noc,sysadmin-web
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
--- a/inventory/group_vars/pkgdb
+++ b/inventory/group_vars/pkgdb
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/pkgdb-stg
+++ b/inventory/group_vars/pkgdb-stg
@ -13,7 +13,7 @@ wsgi_threads: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs
+fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/pkgs
+++ b/inventory/group_vars/pkgs
@ -16,11 +16,11 @@ wsgi_fedmsg_service: pagure
 wsgi_procs: 4
 wsgi_threads: 4

-fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc
+fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc,sysadmin-veteran
 fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s
 fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s
-fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc"
-admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc"
+fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
+admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc @sysadmin-veteran"

 git_group: packager
 git_port: 9418
--- a/inventory/group_vars/pkgs-stg
+++ b/inventory/group_vars/pkgs-stg
@ -16,11 +16,11 @@ wsgi_fedmsg_service: pagure
 wsgi_procs: 4
 wsgi_threads: 4

-fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc
+fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran
 fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s
 fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s
-fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc"
-admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc"
+fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
+admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc @sysadmin-veteran"

 git_group: packager
 git_port: 9418
--- a/inventory/group_vars/postgresql-server
+++ b/inventory/group_vars/postgresql-server
@ -6,4 +6,4 @@ num_cpus: 4
 # for systems that do not match the above - specify the same parameter in
 # the host_vars/$hostname file

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran
--- a/inventory/group_vars/releng-secondary
+++ b/inventory/group_vars/releng-secondary
@ -13,7 +13,7 @@ nrpe_procs_crit: 1000

 nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4"

-fas_client_groups: sysadmin-releng,sysadmin-secondary,sysadmin-noc
+fas_client_groups: sysadmin-releng,sysadmin-secondary,sysadmin-noc,sysadmin-veteran
 sudoers: "{{ private }}/files/sudo/00releng-sudoers"

 host_group: releng
--- a/inventory/group_vars/statscache-backend
+++ b/inventory/group_vars/statscache-backend
@ -10,7 +10,7 @@ num_cpus: 4
 # No fedmsg publication... no ports.
 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # For performance measurement.. for now.  This can be removed whenever.
 fedmsg_loglevel: DEBUG
--- a/inventory/group_vars/statscache-backend-stg
+++ b/inventory/group_vars/statscache-backend-stg
@ -10,4 +10,4 @@ num_cpus: 2
 # Nope
 tcp_ports: []

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
--- a/inventory/group_vars/statscache-web
+++ b/inventory/group_vars/statscache-web
@ -9,4 +9,4 @@ num_cpus: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
--- a/inventory/group_vars/statscache-web-stg
+++ b/inventory/group_vars/statscache-web-stg
@ -9,4 +9,4 @@ num_cpus: 2

 tcp_ports: [ 80 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
--- a/inventory/group_vars/summershum
+++ b/inventory/group_vars/summershum
@ -9,7 +9,7 @@ num_cpus: 2

 tcp_ports: [ 3000 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/summershum-stg
+++ b/inventory/group_vars/summershum-stg
@ -9,7 +9,7 @@ num_cpus: 2

 tcp_ports: [ 3000 ]

-fas_client_groups: sysadmin-noc,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/tagger
+++ b/inventory/group_vars/tagger
@ -16,7 +16,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/tagger-stg
+++ b/inventory/group_vars/tagger-stg
@ -16,7 +16,7 @@ tcp_ports: [ 80 ]
 # Neeed for rsync from log01 for logs.
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/zanata2fedmsg
+++ b/inventory/group_vars/zanata2fedmsg
@ -20,7 +20,7 @@ custom_rules: [
    '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
 ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/zanata2fedmsg-stg
+++ b/inventory/group_vars/zanata2fedmsg-stg
@ -20,7 +20,7 @@ custom_rules: [
    '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
 ]

-fas_client_groups: sysadmin-noc
+fas_client_groups: sysadmin-noc,sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs: