Allow all users to read RabbitMQ credential to get notifications
Needs ReviewPublic
Actions

Authored by dereckson on Oct 16 2024, 20:47.

Tags

None

Referenced Files

	F8191397: D3524.diff
	Fri, May 9, 15:14

	Unknown Object (File)
	Wed, Apr 30, 01:47

	Unknown Object (File)
	Mon, Apr 28, 04:56

	Unknown Object (File)
	Mon, Apr 21, 01:21

	Unknown Object (File)
	Sat, Apr 19, 15:34

	Unknown Object (File)
	Fri, Apr 18, 14:58

	Unknown Object (File)
	Thu, Apr 17, 08:04

	Unknown Object (File)
	Thu, Apr 17, 07:58

View All 86 Files

Subscribers

None

Details

Reviewers

aceppaluni

Summary

The RabbitMQ credential for notifications is intended to be shared
among devserver users, as such, it makes sense to make the secret
file readable for the nasquenautes group.

This credential allows only to READ from a queue on the dev vhost,
and doesn't give access to anything else than notifications.

Test Plan

Deployed on WindRiver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

notifications-nasquenautes

Build Status

Buildable 5599
Build 5881: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Oct 16 2024, 20:47

dereckson created this revision.

Harbormaster completed remote builds in B5599: Diff 9060.Oct 16 2024, 20:47

dereckson added inline comments.Oct 16 2024, 20:47

roles/devserver/userland-software/notifications.sls
33	This is always deployed to devservers, as this is a part of the devserver role.

Revision Contents
Changeset List

Path

Size

roles/

devserver/

userland-software/

notifications.sls

4 lines

Diff 9060

View Options

roles/devserver/userland-software/notifications.sls

Allow all users to read RabbitMQ credential to get notificationsNeeds ReviewPublicActions