d0831dc4ce
The tripleo-common sudoers file allows an owner change on the validations identity file. The command is only allowed with the `-h` option, but this option isn't used in the `write_inputs_file` python code. This breaks validation runs started through Mistral. This patch adds this option to the `chown` command. It also removes an useless line in the sudoers file. Change-Id: Idd3098cfa3aab5dd618645e54b922f90cd9ae13f Signed-off-by: Gael Chamoulaud <gchamoul@redhat.com>
19 lines
1.6 KiB
Plaintext
19 lines
1.6 KiB
Plaintext
Defaults!/usr/bin/run-validation !requiretty
|
|
Defaults:validations !requiretty
|
|
Defaults:mistral !requiretty
|
|
mistral ALL = (validations) NOPASSWD:SETENV: /usr/bin/run-validation
|
|
mistral ALL = NOPASSWD: /usr/bin/chown -h validations\: /tmp/validations_identity_[A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_], \
|
|
!/usr/bin/chown /tmp/validations_identity_* *, !/usr/bin/chown /tmp/validations_identity_*..*
|
|
mistral ALL = NOPASSWD: /usr/bin/chown -h validations\: /tmp/validations_inputs_[A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_], \
|
|
!/usr/bin/chown /tmp/validations_inputs_* *, !/usr/bin/chown /tmp/validations_inputs_*..*
|
|
mistral ALL = NOPASSWD: /usr/bin/rm -f /tmp/validations_identity_[A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_], \
|
|
!/usr/bin/rm /tmp/validations_identity_* *, !/usr/bin/rm /tmp/validations_identity_*..*
|
|
mistral ALL = NOPASSWD: /usr/bin/rm -f /tmp/validations_inputs_[A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_][A-Za-z0-9_], \
|
|
!/usr/bin/rm /tmp/validations_inputs_* *, !/usr/bin/rm /tmp/validations_inputs_*..*
|
|
mistral ALL = NOPASSWD: /bin/nova-manage cell_v2 discover_hosts *
|
|
mistral ALL = NOPASSWD: /usr/bin/tar --xattrs --ignore-failed-read -C / -cf /var/tmp/undercloud-backup-*.tar *
|
|
mistral ALL = NOPASSWD: /usr/bin/chown mistral. /var/tmp/undercloud-backup-*/filesystem-*.tar
|
|
mistral ALL = NOPASSWD: /usr/bin/tripleo-container-image-prepare *
|
|
mistral ALL = NOPASSWD: /usr/bin/tripleo-deploy-openshift *
|
|
validations ALL = NOPASSWD: ALL
|