Page MenuHomeDevCentral

Allow all users to read RabbitMQ credential to get notifications
ClosedPublic

Authored by dereckson on Oct 16 2024, 20:47.
Tags
None
Referenced Files
F11704893: D3524.id9060.diff
Fri, Sep 12, 18:43
F11700389: D3524.diff
Fri, Sep 12, 13:33
Unknown Object (File)
Wed, Sep 10, 16:40
Unknown Object (File)
Wed, Sep 10, 15:05
Unknown Object (File)
Tue, Sep 9, 18:31
Unknown Object (File)
Tue, Sep 2, 01:39
Unknown Object (File)
Sat, Aug 30, 05:31
Unknown Object (File)
Tue, Aug 26, 16:56
Subscribers
None

Details

Summary

The RabbitMQ credential for notifications is intended to be shared
among devserver users, as such, it makes sense to make the secret
file readable for the nasquenautes group.

This credential allows only to READ from a queue on the dev vhost,
and doesn't give access to anything else than notifications.

Test Plan

Deployed on WindRiver

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.
roles/devserver/userland-software/notifications.sls
33

This is always deployed to devservers, as this is a part of the devserver role.

This revision is now accepted and ready to land.Thu, Sep 11, 19:39