Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for builders in prod

Browse source 
Also, revise special treatment for bkernel*, the `ipa/client` role
grants shell, sudo access for sysadmin-main by default, just ensure the
lists for additional groups are empty.

Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 540f0fc967
commit b5462742b1
10 changed files with 9 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

6
inventory/group_vars/bkernel
View file

@ -5,3 +5,9 @@ koji_hub_nfs: "fedora_koji"
koji_server_url: "https://koji.fedoraproject.org/kojihub"
koji_weburl: "https://koji.fedoraproject.org/koji"
koji_topurl: "https://kojipkgs.fedoraproject.org/"
ipa_host_group: kojibuilder-kernel
ipa_host_group_desc: Koji Build hosts for kernel builds
# Both of these default to sysadmin-main in the ipa/client role
ipa_client_shell_groups: []
ipa_client_sudo_groups: []