zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity
ansible/inventory/group_vars/maintainer_test

16 lines
365 B
Text
Raw Normal View History

Add beaker01 to ansible
2013-08-12 15:47:12 +00:00
---
freezes: false
Fix arm packager sudoers
2014-05-10 22:45:24 +00:00
sudoers: "{{ private }}/files/sudo/arm-packager-sudoers"
Grrrrr. - is not valid in a variable name
2014-02-28 21:00:21 +00:00
sudoers_main: nopasswd
maintainer_test: move the fedora maintainer test instances over to aws. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-02-18 00:32:31 +00:00
datacenter: aws
Killed trailing spaces in group/host vars with fire. Normally it's just a nitpick to not have trailing spaces on variables. However, for some things like mac address, it really matters. Bunches of buildhw's were failing ansibile because they were passing "mac address " to linux-system-roles networking and ansible was going 'huh, nope, I can't find that mac address here at all'. So, just blow all the tailing spaces away to avoid any other variables that hit this. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 08:52:52 -07:00
ansible_ifcfg_blocklist: true
Add maintainer_test and copr vmhosts to vpn We need to add these hosts to the vpn to use ipa for auth on them. They are in the 192.168.100 network, which is the 'more restricted' subnet of vpn. After the freeze we will probibly want to lock this down more with a rule on all hosts except ipa* to reject everything from them. In the mean time the firewall rules blocking most things should be ok for now. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-16 10:41:58 -07:00
vpn: true
primary_auth_source: ipa
ipa_host_group: maintainer_test
ipa_host_group_desc: Test hosts for package maintainers
ipa_client_shell_groups:
- packager
ipa / client: setup nopasswd sudo groups for maintainer test For the maintainer_tests instances we just want to allow anyone with shell access ability to sudo with no password. In this case asking for password/tokens could provide a MITM attack vector. This matches up with the way they were setup before with fas2. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-20 14:40:49 -07:00
ipa_client_sudo_nopasswd_groups:
- sysadmin-main
Add maintainer_test and copr vmhosts to vpn We need to add these hosts to the vpn to use ipa for auth on them. They are in the 192.168.100 network, which is the 'more restricted' subnet of vpn. After the freeze we will probibly want to lock this down more with a rule on all hosts except ipa* to reject everything from them. In the mean time the firewall rules blocking most things should be ok for now. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-16 10:41:58 -07:00
- packager
Copy permalink