From 6fe1080e0f55a85129e8be33555ea6570c0b61cb Mon Sep 17 00:00:00 2001 From: Simon Cornet Date: Mon, 9 Dec 2024 11:22:18 +0100 Subject: [PATCH] [usermanagement] feat: allow drone to use git in roles/common --- templates/usermanagement/sudoers.d/sudoers.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/usermanagement/sudoers.d/sudoers.j2 b/templates/usermanagement/sudoers.d/sudoers.j2 index 130923e..aa75afe 100644 --- a/templates/usermanagement/sudoers.d/sudoers.j2 +++ b/templates/usermanagement/sudoers.d/sudoers.j2 @@ -1,6 +1,7 @@ {% if __user['username'] == 'drone' %} {% if inventory_hostname == 'ansible.siempie.internal' %} drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible * +drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible/roles/common * drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy install -r /etc/ansible/ansible_requirements.yaml drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook * {% endif %}