Re: FBR: Allow sysadmin-osbs to SSH into bastion and batcave

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Sep 09, 2019 at 02:15:25PM +0200, Mikolaj Izdebski wrote:
> Resolves https://pagure.io/fedora-infrastructure/issue/8182
> ---
>  inventory/group_vars/bastion | 2 +-
>  inventory/group_vars/batcave | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
> index 37b6d3e85..aeacc87e4 100644
> --- a/inventory/group_vars/bastion
> +++ b/inventory/group_vars/bastion
> @@ -23,7 +23,7 @@ custom_rules: [
> 
>  # TODO - remove modularity-wg membership here once it is not longer needed:
>  # https://fedorahosted.org/fedora-infrastructure/ticket/5363
> -fas_client_groups:
> sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver
> +fas_client_groups:
> sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs
> 
>  #
>  # This is a postfix gateway. This will pick up gateway postfix config in base
> diff --git a/inventory/group_vars/batcave b/inventory/group_vars/batcave
> index d415cd225..2fe5f4745 100644
> --- a/inventory/group_vars/batcave
> +++ b/inventory/group_vars/batcave
> @@ -8,7 +8,7 @@ tcp_ports: [ 80, 443, 8442, 8443 ]
>  # Neeed for rsync from log01 for logs.
>  custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j
> ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j
> ACCEPT' ]
> 
> -fas_client_groups:
> sysadmin-ask,sysadmin-atomic,sysadmin-cvs,sysadmin-main,sysadmin-web,sysadmin-noc,sysadmin-hosted,sysadmin-releng,sysadmin-qa,sysadmin-tools,sysadmin-cloud,sysadmin-bot,sysadmin-centos,sysadmin-koschei,sysadmin-datanommer,sysadmin-fedimg,fi-apprentice,sysadmin-regcfp,sysadmin-badges,sysadmin-mbs,sysadmin-veteran,sysadmin-coreos,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-fpdc,sysadmin-messaging,sysadmin-libravatar,sysadmin-gnome,sysadmin-copr
> +fas_client_groups:
> sysadmin-ask,sysadmin-atomic,sysadmin-cvs,sysadmin-main,sysadmin-web,sysadmin-noc,sysadmin-hosted,sysadmin-releng,sysadmin-qa,sysadmin-tools,sysadmin-cloud,sysadmin-bot,sysadmin-centos,sysadmin-koschei,sysadmin-datanommer,sysadmin-fedimg,fi-apprentice,sysadmin-regcfp,sysadmin-badges,sysadmin-mbs,sysadmin-veteran,sysadmin-coreos,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-fpdc,sysadmin-messaging,sysadmin-libravatar,sysadmin-gnome,sysadmin-copr,sysadmin-osbs
> 
>  ansible_base: /srv/web/infra
>  freezes: false

+1 for me as well


Pierre
_______________________________________________
infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux