On Wed, Aug 31, 2016 at 3:31 PM, Kevin Fenzi <kevin(a)scrye.com> wrote:
On Tue, 30 Aug 2016 15:25:53 -0500
Adam Miller <maxamillion(a)fedoraproject.org> wrote:
> Hello all,
> I've been doing some work on the Fedora RelEng Automation[0][1]
> lately and I've gotten to a point that I have some Ansible playbooks
> that I'd like to test but I need to be able to run them somewhere in
> the Fedora Infrastructure as they will need to be able to touch
> various Release Engineering related systems (at least compose machines
> to begin with).
>
> I'd like advisement from the Infrastructure Team on how best to move
> forward with this. I'm happy to do the leg work, I just need some
> guidance to make sure I'm complying with Infra standards.
Well, I am assuming it needs to run as root on those machines?
If so, the only place it can really run is batcave01.
I suppose we could setup something to pull from the pagure repo and
allow whoever needs to ability to run playbooks against that repo?
That would be perfect, even allowing for these to run via
rbac-playbook for testing would be great. Ultimately I'd like to be
able to run these without human interaction via ansibull, but I
suspect that will be bigger discussion around security implications.
-AdamM
>
> kevin
>
> _______________________________________________
> infrastructure mailing list
> infrastructure(a)lists.fedoraproject.org
>
https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedorapr...
>