ansible/common
ansible/common
1
0
Fork 0
Code Issues Pull requests Releases Activity

[usermanagement] feat: added registry rules for drone user

Browse source
This commit is contained in:
Simon Cornet 2024-12-07 20:40:40 +01:00
commit fab407c59f
1 changed files with 2 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
templates/usermanagement/sudoers.d/sudoers.j2
View file

@ -1,21 +1,15 @@
{% if __user['username'] == 'drone' %} {% if __user['username'] == 'drone' %}
# ansible.siempie.internal
{% if inventory_hostname == 'ansible.siempie.internal' %} {% if inventory_hostname == 'ansible.siempie.internal' %}
drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible * drone ansible.siempie.internal=(root) NOPASSWD:/usr/bin/git -C /etc/ansible *
drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy install -r /etc/ansible/ansible_requirements.yaml drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-galaxy install -r /etc/ansible/ansible_requirements.yaml
drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook * drone ansible.siempie.internal=(root) NOPASSWD:/usr/local/bin/ansible-playbook *
{% endif %} {% endif %}
# mgmt01.siempie.local
{% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %} {% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %}
drone mgmt01.siempie.internal=(simon) NOPASSWD:/usr/local/bin/kubectl * drone mgmt01.siempie.internal=(simon) NOPASSWD:/usr/local/bin/kubectl *
{% endif %} {% endif %}
{% if inventory_hostname == 'registry.siempie.internal' %}
# registry.siempie.internal drone registry.siempie.internal=(root) NOPASSWD:/usr/bin/docker *
{% if inventory_hostname == 'mgmt01.infra.vpn.mirahsimon.us' %}
drone registry.siempie.internal=(root) NOPASSWD:/
{% endif %} {% endif %}
{% else %} {% else %}
{% if sudo_pwless == False %} {% if sudo_pwless == False %}
{{ __user['username'] }} ALL=(ALL) ALL {{ __user['username'] }} ALL=(ALL) ALL