PR#807: sudoers: still needed on batcave for rbac - fedora-infra/ansible

fedora-infra / ansible

#807 sudoers: still needed on batcave for rbac

Merged 3 years ago by kevin. Opened 3 years ago by mobrien.

fedora-infra/ mobrien/ansible batcave-sudo into main

sudoers: still needed on batcave for rbac

Mark O Brien • 3 years ago

bb79042

roles/sudo/tasks/main.yml

file modified

+1 -1

		`@@ -44,7 +44,7 @@`
		`- "{{ private }}/files/sudo/{{ ansible_hostname }}-sudoers"`
		`- "{{ private }}/files/sudo/{{ ansible_domain }}-sudoers"`
		`- "{{ private }}/files/sudo/default"`
		`- when: "(primary_auth_source \| default('fas')) == 'fas'"`
		`+ when: inventory_hostname.startswith('batcave')`
		`tags:`
		`- config`
		`- sudo`

mobrien commented 3 years ago

Signed-off-by: Mark O Brien markobri@redhat.com

For rbac playbook to work correctly on the batcave the sudoers file still need rules updated. As far as I know batcave is the only host that needs this since the move to ipa but I am not 100% certain