zuul-jobs/roles/remove-zuul-sshkey
James E. Blair 9e22cfdb0f Remove shebang from all python ansible modules
This commit in Ansible:
9142be2f6c

now allows Python modules to specify their interpreter with the shebang.
We expect our roles to use the discovered python interpreter on remote
nodes, and on the executor, we need them to use the virtualenv.  Removing
the specific shebang accomplishes this under Ansible 6, and has no effect
under older versions of Ansible.

Without this, for example, the log upload roles would not have access to
their cloud libraries.

Also update our ansible/cli check in our module files.  Many of our modules
can be run from the command line for ease of testing, but the check that we
perform to determine if the module is being invoked from the command line
or Ansible fails on Ansible 5.  Update it to a check that should work in
all 4 versions of Ansible that Zuul uses.

Change-Id: I4e6e85156459cca032e6c3e1d8a9284be919ccca
2022-09-15 13:48:10 -07:00
..
library Remove shebang from all python ansible modules 2022-09-15 13:48:10 -07:00
tasks Add remove-zuul-sshkey 2020-05-15 12:24:33 +00:00
README.rst Add remove-zuul-sshkey 2020-05-15 12:24:33 +00:00
__init__.py Add remove-zuul-sshkey 2020-05-15 12:24:33 +00:00

README.rst

Remove the zuul ssh key

This role is intended to be run on the Zuul Executor at the start of every job to prevent access to public Zuul ssh connection.