aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuca Di Stefano <luca.distefano@linaro.org>2016-08-31 14:46:07 +0100
committerLuca Di Stefano <luca.distefano@linaro.org>2016-08-31 14:46:07 +0100
commited2d0023ce63a9ddfc014623282baafaacc9c849 (patch)
tree97585b66cc3bb35ea681ff35710ec7fa20694e89
parent5bca8bf438cde44c3a87ff64b261ba63e040e91a (diff)
role for tcwg group to sudo to tcwg-buildslave
Change-Id: Ie53f409e963f92df4411cf575154803a27ebd2c4
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/defaults/git.hold0
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/files/tcwg1
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/handlers/main.yml0
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/meta/git.hold0
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/tasks/main.yml13
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/templates/git.hold0
-rw-r--r--playbooks/roles/tcwg-buildslave-sudo/vars/main.yml0
7 files changed, 14 insertions, 0 deletions
diff --git a/playbooks/roles/tcwg-buildslave-sudo/defaults/git.hold b/playbooks/roles/tcwg-buildslave-sudo/defaults/git.hold
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/defaults/git.hold
diff --git a/playbooks/roles/tcwg-buildslave-sudo/files/tcwg b/playbooks/roles/tcwg-buildslave-sudo/files/tcwg
new file mode 100644
index 0000000..073615c
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/files/tcwg
@@ -0,0 +1 @@
+%tcwg ALL=(tcwg-buildslave) NOPASSWD: ALL
diff --git a/playbooks/roles/tcwg-buildslave-sudo/handlers/main.yml b/playbooks/roles/tcwg-buildslave-sudo/handlers/main.yml
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/handlers/main.yml
diff --git a/playbooks/roles/tcwg-buildslave-sudo/meta/git.hold b/playbooks/roles/tcwg-buildslave-sudo/meta/git.hold
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/meta/git.hold
diff --git a/playbooks/roles/tcwg-buildslave-sudo/tasks/main.yml b/playbooks/roles/tcwg-buildslave-sudo/tasks/main.yml
new file mode 100644
index 0000000..d7ac400
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/tasks/main.yml
@@ -0,0 +1,13 @@
+---
+
+- name: configure TCWG buildslave sudo access
+ copy: src=files/tcwg
+ dest=/etc/sudoers.d/tcwg
+ owner=root
+ group=root
+ mode=0400
+ validate='visudo -cf %s'
+ tags:
+ - sudoers
+ - configupdate
+
diff --git a/playbooks/roles/tcwg-buildslave-sudo/templates/git.hold b/playbooks/roles/tcwg-buildslave-sudo/templates/git.hold
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/templates/git.hold
diff --git a/playbooks/roles/tcwg-buildslave-sudo/vars/main.yml b/playbooks/roles/tcwg-buildslave-sudo/vars/main.yml
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/tcwg-buildslave-sudo/vars/main.yml