From fab407c59fc5a4a8619947c3f3743b15f3ffd0e0 Mon Sep 17 00:00:00 2001
From: Simon Cornet <simon.cornet@itcreation.nl>
Date: Sat, 7 Dec 2024 20:40:40 +0100
Subject: [PATCH] [usermanagement] feat: added registry rules for drone user

---
 templates/usermanagement/sudoers.d/sudoers.j2 | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/templates/usermanagement/sudoers.d/sudoers.j2 b/templates/usermanagement/sudoers.d/sudoers.j2
index 049eb8d..130923e 100644
--- a/templates/usermanagement/sudoers.d/sudoers.j2
+++ b/templates/usermanagement/sudoers.d/sudoers.j2
@@ -1,21 +1,15 @@
 {% if __user['username'] == 'drone' %}
-# ansible.siempie.internal
 {% if inventory_hostname == 'ansible.siempie.internal' %}
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible *
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy install -r /etc/ansible/ansible_requirements.yaml
 drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook *
 {% endif %}
-
-# mgmt01.siempie.local
 {% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %}
 drone mgmt01.siempie.internal=(simon) NOPASSWD:/usr/local/bin/kubectl *
 {% endif %}
-
-# registry.siempie.internal
-{% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %}
-drone registry.siempie.internal=(root) NOPASSWD:/
+{% if inventory_hostname == 'registry.siempie.internal' %}
+drone registry.siempie.internal=(root) NOPASSWD:/usr/bin/docker *
 {% endif %}
-
 {% else %}
 {% if sudo_pwless == False %}
 {{ __user['username'] }} ALL=(ALL) ALL