Re: FBR: Allow sysadmin-osbs to SSH into bastion and batcave

[Clement Verna]

+1 nice and easy

On Mon, 9 Sep 2019 at 14:26, Mikolaj Izdebski <mizdebsk(a)redhat.com&gt; wrote:

>  Resolves https://pagure.io/fedora-infrastructure/issue/8182
>  ---
>   inventory/group_vars/bastion | 2 +-
>   inventory/group_vars/batcave | 2 +-
>   2 files changed, 2 insertions(+), 2 deletions(-)
>
>  diff --git a/inventory/group_vars/bastion b/inventory/group_vars/bastion
>  index 37b6d3e85..aeacc87e4 100644
>  --- a/inventory/group_vars/bastion
>  +++ b/inventory/group_vars/bastion
>  @@ -23,7 +23,7 @@ custom_rules: [
>
>   # TODO - remove modularity-wg membership here once it is not longer
>  needed:
>   # https://fedorahosted.org/fedora-infrastructure/ticket/5363
>  -fas_client_groups:
>
>
> sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver
>  +fas_client_groups:
>
>
> sysadmin-ask,sysadmin-atomic,sysadmin-web,sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-releng,sysadmin-dba,sysadmin-hosted,sysadmin-tools,sysadmin-spin,sysadmin-cloud,fi-apprentice,sysadmin-badges,sysadmin-troubleshoot,sysadmin-qa,sysadmin-centos,sysadmin-ppc,sysadmin-koschei,sysadmin-secondary,sysadmin-fedimg,sysadmin-veteran,sysadmin-mbs,modularity-wg,pungi-devel,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-gnome,sysadmin-copr,sysadmin-coreos,sysadmin-dbgserver,sysadmin-osbs
>
>   #
>   # This is a postfix gateway. This will pick up gateway postfix config in
>  base
>  diff --git a/inventory/group_vars/batcave b/inventory/group_vars/batcave
>  index d415cd225..2fe5f4745 100644
>  --- a/inventory/group_vars/batcave
>  +++ b/inventory/group_vars/batcave
>  @@ -8,7 +8,7 @@ tcp_ports: [ 80, 443, 8442, 8443 ]
>   # Neeed for rsync from log01 for logs.
>   custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j
>  ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j
>  ACCEPT' ]
>
>  -fas_client_groups:
>
>
> sysadmin-ask,sysadmin-atomic,sysadmin-cvs,sysadmin-main,sysadmin-web,sysadmin-noc,sysadmin-hosted,sysadmin-releng,sysadmin-qa,sysadmin-tools,sysadmin-cloud,sysadmin-bot,sysadmin-centos,sysadmin-koschei,sysadmin-datanommer,sysadmin-fedimg,fi-apprentice,sysadmin-regcfp,sysadmin-badges,sysadmin-mbs,sysadmin-veteran,sysadmin-coreos,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-fpdc,sysadmin-messaging,sysadmin-libravatar,sysadmin-gnome,sysadmin-copr
>  +fas_client_groups:
>
>
> sysadmin-ask,sysadmin-atomic,sysadmin-cvs,sysadmin-main,sysadmin-web,sysadmin-noc,sysadmin-hosted,sysadmin-releng,sysadmin-qa,sysadmin-tools,sysadmin-cloud,sysadmin-bot,sysadmin-centos,sysadmin-koschei,sysadmin-datanommer,sysadmin-fedimg,fi-apprentice,sysadmin-regcfp,sysadmin-badges,sysadmin-mbs,sysadmin-veteran,sysadmin-coreos,sysadmin-upstreamfirst,sysadmin-releasemonitoring,sysadmin-fpdc,sysadmin-messaging,sysadmin-libravatar,sysadmin-gnome,sysadmin-copr,sysadmin-osbs
>
>   ansible_base: /srv/web/infra
>   freezes: false
>  --
>  2.21.0
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to
>  infrastructure-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>