Fix sudo rules for sysadmin-noc and sysadmin-veteran

2026-02-02 20:59:02 +08:00 · 2021-03-28 20:46:01 -05:00
parent 5c1f91f588
commit 0eae657232
51 changed files with 0 additions and 101 deletions
--- a/inventory/group_vars/badges
+++ b/inventory/group_vars/badges
@@ -8,5 +8,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-badges
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/blockerbugs
+++ b/inventory/group_vars/blockerbugs
@@ -20,9 +20,7 @@ ipa_client_shell_groups:
 - sysadmin-qa
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-qa
- sysadmin-veteran

 # This gets overridden by whichever node we want to run special cronjobs.
 master_blockerbugs_node: False
--- a/inventory/group_vars/blockerbugs_stg
+++ b/inventory/group_vars/blockerbugs_stg
@@ -19,9 +19,7 @@ ipa_client_shell_groups:
 - sysadmin-qa
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-qa
- sysadmin-veteran

 # This gets overridden by whichever node we want to run special cronjobs.
 master_blockerbugs_node: False
--- a/inventory/group_vars/bugzilla2fedmsg
+++ b/inventory/group_vars/bugzilla2fedmsg
@@ -18,8 +18,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/bugzilla2fedmsg_stg
+++ b/inventory/group_vars/bugzilla2fedmsg_stg
@@ -17,8 +17,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/busgateway
+++ b/inventory/group_vars/busgateway
@@ -24,8 +24,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/busgateway_stg
+++ b/inventory/group_vars/busgateway_stg
@@ -22,8 +22,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/datagrepper
+++ b/inventory/group_vars/datagrepper
@@ -24,8 +24,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/datagrepper_stg
+++ b/inventory/group_vars/datagrepper_stg
@@ -20,7 +20,5 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran

 freezes: false
--- a/inventory/group_vars/dbserver
+++ b/inventory/group_vars/dbserver
@@ -7,5 +7,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-dba
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/dbserver_stg
+++ b/inventory/group_vars/dbserver_stg
@@ -7,5 +7,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-dba
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/fedocal
+++ b/inventory/group_vars/fedocal
@@ -23,9 +23,7 @@ ipa_client_shell_groups:
 - sysadmin-web
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-web
- sysadmin-veteran

 freezes: false

--- a/inventory/group_vars/github2fedmsg
+++ b/inventory/group_vars/github2fedmsg
@@ -23,9 +23,6 @@ ipa_host_group_desc: Bridge select GitHub repo events into bus messages
 ipa_client_shell_groups:
 - sysadmin-noc
 - sysadmin-veteran
-ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran

 # for fedora-messaging
 username: "github2fedmsg{{ env_suffix }}"
--- a/inventory/group_vars/github2fedmsg_stg
+++ b/inventory/group_vars/github2fedmsg_stg
@@ -22,9 +22,6 @@ ipa_host_group_desc: Bridge select GitHub repo events into bus messages
 ipa_client_shell_groups:
 - sysadmin-noc
 - sysadmin-veteran
-ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran

 # for fedora-messaging
 username: "github2fedmsg{{ env_suffix }}"
--- a/inventory/group_vars/kerneltest
+++ b/inventory/group_vars/kerneltest
@@ -22,9 +22,6 @@ ipa_host_group: kerneltest
 ipa_client_shell_groups:
 - sysadmin-noc
 - sysadmin-veteran
-ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/koji_stg
+++ b/inventory/group_vars/koji_stg
@@ -21,10 +21,8 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-osbs
 - sysadmin-releng
- sysadmin-veteran

 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
--- a/inventory/group_vars/kojipkgs
+++ b/inventory/group_vars/kojipkgs
@@ -21,9 +21,7 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-releng
- sysadmin-veteran

 varnish_group: kojipkgs

--- a/inventory/group_vars/logging
+++ b/inventory/group_vars/logging
@@ -13,5 +13,3 @@ ipa_client_sudo_groups:
 - sysadmin-analysis
 - sysadmin-atomic
 - sysadmin-logs
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/mbs
+++ b/inventory/group_vars/mbs
@@ -8,7 +8,5 @@ ipa_client_shell_groups:
 - sysadmin-mbs
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-releng
 - sysadmin-mbs
- sysadmin-veteran
--- a/inventory/group_vars/mbs_stg
+++ b/inventory/group_vars/mbs_stg
@@ -7,7 +7,5 @@ ipa_client_shell_groups:
 - sysadmin-mbs
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-releng
 - sysadmin-mbs
- sysadmin-veteran
--- a/inventory/group_vars/memcached
+++ b/inventory/group_vars/memcached
@@ -20,6 +20,4 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web
--- a/inventory/group_vars/memcached_stg
+++ b/inventory/group_vars/memcached_stg
@@ -17,6 +17,4 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web
--- a/inventory/group_vars/mm
+++ b/inventory/group_vars/mm
@@ -9,7 +9,6 @@ ipa_client_shell_groups:
 - sysadmin-web
 ipa_client_sudo_groups:
 - sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 mm2_checkin: false
--- a/inventory/group_vars/mm_stg
+++ b/inventory/group_vars/mm_stg
@@ -8,7 +8,6 @@ ipa_client_shell_groups:
 - sysadmin-web
 ipa_client_sudo_groups:
 - sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 mm2_checkin: false
--- a/inventory/group_vars/nagios
+++ b/inventory/group_vars/nagios
@@ -32,7 +32,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-noc
- sysadmin-veteran

 csi_security_category: High
 csi_primary_contact: Fedora Admins - admin@fedoraproject.org
--- a/inventory/group_vars/notifs
+++ b/inventory/group_vars/notifs
@@ -8,5 +8,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/nuancier
+++ b/inventory/group_vars/nuancier
@@ -8,5 +8,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/nuancier_stg
+++ b/inventory/group_vars/nuancier_stg
@@ -7,5 +7,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-datanommer
- sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/odcs
+++ b/inventory/group_vars/odcs
@@ -7,10 +7,8 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-odcs
 - sysadmin-releng
- sysadmin-veteran

 # Configs executed on releng backends must have "releng_" prefix.
 odcs_raw_config_urls:
--- a/inventory/group_vars/odcs_stg
+++ b/inventory/group_vars/odcs_stg
@@ -6,10 +6,8 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-odcs
 - sysadmin-releng
- sysadmin-veteran

 # Configs executed on releng backends must have "releng_" prefix.
 odcs_raw_config_urls:
--- a/inventory/group_vars/openqa_servers_common
+++ b/inventory/group_vars/openqa_servers_common
@@ -67,6 +67,4 @@ ipa_client_shell_groups:
 - sysadmin-qa
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-qa
- sysadmin-veteran
--- a/inventory/group_vars/osbs
+++ b/inventory/group_vars/osbs
@@ -19,10 +19,8 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-osbs
 - sysadmin-releng
- sysadmin-veteran

 docker_cert_dir: "/etc/docker/certs.d/candidate-registry.fedoraproject.org"
 docker_registry: "candidate-registry.fedoraproject.org"
--- a/inventory/group_vars/osbs_stg
+++ b/inventory/group_vars/osbs_stg
@@ -15,10 +15,8 @@ ipa_client_shell_groups:
 - sysadmin-releng
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-osbs
 - sysadmin-releng
- sysadmin-veteran

 docker_cert_dir: "/etc/docker/certs.d/candidate-registry.stg.fedoraproject.org"
 source_registry: "registry.fedoraproject.org"
--- a/inventory/group_vars/pagure
+++ b/inventory/group_vars/pagure
@@ -72,9 +72,7 @@ ipa_client_shell_groups:
 - sysadmin-web
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-web
- sysadmin-veteran

 freezes: true
 postfix_group: vpn.pagure
--- a/inventory/group_vars/pagure_stg
+++ b/inventory/group_vars/pagure_stg
@@ -69,9 +69,7 @@ ipa_client_shell_groups:
 - sysadmin-web
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-web
- sysadmin-veteran

 freezes: false
 env: pagure-staging
--- a/inventory/group_vars/pdc_web
+++ b/inventory/group_vars/pdc_web
@@ -23,9 +23,7 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-mbs
- sysadmin-noc
 - sysadmin-releng
- sysadmin-veteran

 deployment_type: prod

--- a/inventory/group_vars/pdc_web_stg
+++ b/inventory/group_vars/pdc_web_stg
@@ -22,9 +22,7 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-mbs
- sysadmin-noc
 - sysadmin-releng
- sysadmin-veteran

 deployment_type: stg

--- a/inventory/group_vars/pkgs
+++ b/inventory/group_vars/pkgs
@@ -27,8 +27,6 @@ ipa_client_shell_groups:
 ipa_client_sudo_groups:
 - sysadmin-cvs
 - sysadmin-main
- sysadmin-noc
- sysadmin-veteran

 clamscan_mailto: admin@fedoraproject.org
 clamscan_paths:
--- a/inventory/group_vars/pkgs_stg
+++ b/inventory/group_vars/pkgs_stg
@@ -28,8 +28,6 @@ ipa_client_shell_groups:
 ipa_client_sudo_groups:
 - sysadmin-cvs
 - sysadmin-main
- sysadmin-noc
- sysadmin-veteran

 clamscan_mailto: admin@fedoraproject.org
 clamscan_paths:
--- a/inventory/group_vars/proxies
+++ b/inventory/group_vars/proxies
@@ -95,8 +95,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 collectd_apache: true
--- a/inventory/group_vars/proxies_stg
+++ b/inventory/group_vars/proxies_stg
@@ -75,8 +75,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 collectd_apache: true
--- a/inventory/group_vars/resultsdb_stg
+++ b/inventory/group_vars/resultsdb_stg
@@ -20,9 +20,7 @@ ipa_client_shell_groups:
 - sysadmin-qa
 - sysadmin-veteran
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-qa
- sysadmin-veteran

 ############################################################
 # resultsdb details
--- a/inventory/group_vars/secondary
+++ b/inventory/group_vars/secondary
@@ -26,4 +26,3 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 ipa_client_sudo_groups:
 - sysadmin-noc
- sysadmin-veteran
--- a/inventory/group_vars/sundries
+++ b/inventory/group_vars/sundries
@@ -30,7 +30,5 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-releng
- sysadmin-veteran
 - sysadmin-web
--- a/inventory/group_vars/sundries_stg
+++ b/inventory/group_vars/sundries_stg
@@ -29,7 +29,5 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
 - sysadmin-releng
- sysadmin-veteran
 - sysadmin-web
--- a/inventory/group_vars/torrent
+++ b/inventory/group_vars/torrent
@@ -18,8 +18,6 @@ ipa_client_shell_groups:
 - torrent-cc
 - torrentadmin
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web
 - torrentadmin

--- a/inventory/group_vars/value
+++ b/inventory/group_vars/value
@@ -37,8 +37,6 @@ ipa_client_shell_groups:
 - sysadmin-web
 ipa_client_sudo_groups:
 - sysadmin-mote
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 # These are consumed by a task in roles/fedmsg/base/main.yml
--- a/inventory/group_vars/value_stg
+++ b/inventory/group_vars/value_stg
@@ -36,8 +36,6 @@ ipa_client_shell_groups:
 - sysadmin-web
 ipa_client_sudo_groups:
 - sysadmin-mote
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 # These are consumed by a task in roles/fedmsg/base/main.yml
--- a/inventory/group_vars/wiki
+++ b/inventory/group_vars/wiki
@@ -20,8 +20,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 # mediawiki variables
--- a/inventory/group_vars/wiki_stg
+++ b/inventory/group_vars/wiki_stg
@@ -16,8 +16,6 @@ ipa_client_shell_groups:
 - sysadmin-veteran
 - sysadmin-web
 ipa_client_sudo_groups:
- sysadmin-noc
- sysadmin-veteran
 - sysadmin-web

 # mediawiki variables
--- a/inventory/group_vars/zabbix_stg
+++ b/inventory/group_vars/zabbix_stg
@@ -20,8 +20,6 @@ ipa_client_shell_groups:
 - sysadmin-jenkins
 ipa_client_sudo_groups:
 - sysadmin-jenkins
- sysadmin-noc
- sysadmin-veteran