diff --git a/templates/usermanagement/sudoers.d/sudoers.j2 b/templates/usermanagement/sudoers.d/sudoers.j2 index d496384..049eb8d 100644 --- a/templates/usermanagement/sudoers.d/sudoers.j2 +++ b/templates/usermanagement/sudoers.d/sudoers.j2 @@ -1,15 +1,21 @@ {% if __user['username'] == 'drone' %} # ansible.siempie.internal +{% if inventory_hostname == 'ansible.siempie.internal' %} drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible * drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy install -r /etc/ansible/ansible_requirements.yaml drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook * - -# packer.siempie.internal -drone packer.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /mnt/packer * -drone packer.siempie.internal=(root) NOPASSWD:/usr/local/bin/packer * +{% endif %} # mgmt01.siempie.local +{% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %} drone mgmt01.siempie.internal=(simon) NOPASSWD:/usr/local/bin/kubectl * +{% endif %} + +# registry.siempie.internal +{% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %} +drone registry.siempie.internal=(root) NOPASSWD:/ +{% endif %} + {% else %} {% if sudo_pwless == False %} {{ __user['username'] }} ALL=(ALL) ALL