Differential D1021

Allow members of deploy group to run commands as deploy user
ClosedPublic
Actions

Authored by dereckson on Sep 28 2017, 13:31.

Details

Reviewers

dereckson

Commits

rOPSa586535a58e7: Allow members of deploy group to run commands as deploy user

Summary

This is useful for manual git pull in deployment staging
directories.

Test Plan

$ salt-call --local state.apply roles/saltmaster/sudo
local:
----------
          ID: saltmaster_sudo_capabilities_salt
    Function: file.managed
        Name: /usr/local/etc/sudoers.d/salt
      Result: True
     Comment: File /usr/local/etc/sudoers.d/salt is in the correct state
     Started: 13:28:39.682642
    Duration: 145.308 ms
     Changes:   
----------
          ID: saltmaster_sudo_capabilities_deploy
    Function: file.managed
        Name: /usr/local/etc/sudoers.d/deploy
      Result: True
     Comment: File /usr/local/etc/sudoers.d/deploy updated
     Started: 13:28:39.828519
    Duration: 19.121 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644

Summary for local
------------
Succeeded: 2 (changed=1)
Failed:    0
------------
Total states run:     2
Total run time: 164.429 ms
$ sudo -u deploy whoami
deploy