Add revoke-sudo role and update tox jobs

Change-Id: Ie0df08b6c4e4442e6d769b6ca26e59f919889566 Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2017-03-03 15:45:46 -05:00 · 2017-03-03 15:45:46 -05:00 · 3547b695f3
parent 01be2d6a46
commit 3547b695f3
5 changed files with 12 additions and 0 deletions
--- a/playbooks/roles/revoke-sudo/tasks/main.yaml
+++ b/playbooks/roles/revoke-sudo/tasks/main.yaml
@ -0,0 +1,8 @@
+- name: Remove sudo access for zuul user.
+  become: yes
+  file:
+    path: /etc/sudoers.d/zuul-sudo
+    state: absent
+
+- name: Prove that general sudo access is actually revoked.
+  shell: ! sudo -n true
--- a/playbooks/tox-cover.yaml
+++ b/playbooks/tox-cover.yaml
@ -1,4 +1,5 @@
 - hosts: all
  roles:
    - extra-test-setup
+    - revoke-sudo
    - run-cover
--- a/playbooks/tox-docs.yaml
+++ b/playbooks/tox-docs.yaml
@ -1,3 +1,4 @@
 - hosts: all
  roles:
+    - revoke-sudo
    - run-docs
--- a/playbooks/tox-linters.yaml
+++ b/playbooks/tox-linters.yaml
@ -2,4 +2,5 @@
  vars:
    run_tox_envlist: pep8
  roles:
+    - revoke-sudo
    - run-tox
--- a/playbooks/tox-py27.yaml
+++ b/playbooks/tox-py27.yaml
@ -3,4 +3,5 @@
    run_tox_envlist: py27
  roles:
    - extra-test-setup
+    - revoke-sudo
    - run-tox