Allow all users to read RabbitMQ credential to get notifications
Needs ReviewPublic
Actions

Authored by dereckson on Oct 16 2024, 20:47.

Tags

None

Referenced Files

	F9517796: D3524.diff
	Fri, Jun 6, 08:01

	Unknown Object (File)
	Tue, May 27, 21:33

	Unknown Object (File)
	Thu, May 15, 06:18

	Unknown Object (File)
	Sat, May 10, 09:28

	Unknown Object (File)
	Sat, May 10, 07:29

	Unknown Object (File)
	Fri, May 9, 15:14

	Unknown Object (File)
	Apr 30 2025, 01:47

	Unknown Object (File)
	Apr 28 2025, 04:56

View All 91 Files

Subscribers

None

Details

Reviewers

aceppaluni

Summary

The RabbitMQ credential for notifications is intended to be shared
among devserver users, as such, it makes sense to make the secret
file readable for the nasquenautes group.

This credential allows only to READ from a queue on the dev vhost,
and doesn't give access to anything else than notifications.

Test Plan

Deployed on WindRiver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

notifications-nasquenautes

Build Status

Buildable 5599
Build 5881: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Oct 16 2024, 20:47

dereckson created this revision.

Harbormaster completed remote builds in B5599: Diff 9060.Oct 16 2024, 20:47

dereckson added inline comments.Oct 16 2024, 20:47

roles/devserver/userland-software/notifications.sls
33	This is always deployed to devservers, as this is a part of the devserver role.

Revision Contents
Changeset List

Path

Size

roles/

devserver/

userland-software/

notifications.sls

4 lines

Diff 9060

View Options

roles/devserver/userland-software/notifications.sls

Allow all users to read RabbitMQ credential to get notificationsNeeds ReviewPublicActions