zuul-jobs/roles/revoke-sudo
Tristan Cacqueray 892dc6a095 revoke-sudo: only revoke when zuul is sudoer
This change makes unittests jobs usable on read-only environment.

Change-Id: I36cfe7e5849687dbed510396a825dc0ec45542b3
2017-12-05 08:36:26 +00:00
..
tasks revoke-sudo: only revoke when zuul is sudoer 2017-12-05 08:36:26 +00:00
README.rst Remove the right file in revoke-sudo 2017-09-28 20:15:17 +00:00

README.rst

Remove sudo access for the Zuul user.

If the file /etc/sudoers.d/zuul exists, then it will be removed. This is to facilitate systems which may use the same image for tests which require sudo and those which do not.

This role also asserts that sudo access has been removed and will fail if it has not.