On Wed, Aug 31, 2016 at 3:31 PM, Kevin Fenzi <kevin@xxxxxxxxx> wrote: > On Tue, 30 Aug 2016 15:25:53 -0500 > Adam Miller <maxamillion@xxxxxxxxxxxxxxxxx> wrote: > >> Hello all, >> I've been doing some work on the Fedora RelEng Automation[0][1] >> lately and I've gotten to a point that I have some Ansible playbooks >> that I'd like to test but I need to be able to run them somewhere in >> the Fedora Infrastructure as they will need to be able to touch >> various Release Engineering related systems (at least compose machines >> to begin with). >> >> I'd like advisement from the Infrastructure Team on how best to move >> forward with this. I'm happy to do the leg work, I just need some >> guidance to make sure I'm complying with Infra standards. > > Well, I am assuming it needs to run as root on those machines? > > If so, the only place it can really run is batcave01. > > I suppose we could setup something to pull from the pagure repo and > allow whoever needs to ability to run playbooks against that repo? That would be perfect, even allowing for these to run via rbac-playbook for testing would be great. Ultimately I'd like to be able to run these without human interaction via ansibull, but I suspect that will be bigger discussion around security implications. -AdamM > > kevin > > _______________________________________________ > infrastructure mailing list > infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > https://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > _______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
