infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

batcave: allow sysadmin to read rbac-playbook config

Browse source 
This should allow folks in the sysadmin group to read (but not write)
the rbac-playbook config. This should allow folks to more easily tell
who is granted rights to run some playbook.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2021-05-17 09:31:27 -07:00
parent a9df677cf3
commit ec210427ec
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/batcave/tasks/main.yml
View file

@ -430,7 +430,7 @@
#
- name: install the ansible_utils/rbac config
copy: src={{ private }}/files/rbac/rbac.yaml dest=/etc/ansible_utils/rbac.yaml mode=0500
copy: src={{ private }}/files/rbac/rbac.yaml dest=/etc/ansible_utils/rbac.yaml mode=0540 group=sysadmin
tags:
- rbac
- batcave