Details

Reviewers

dereckson
Sandlayth

Maniphest Tasks

T1129: Deploy Odderon on Eglide

Commits

rOPS898a80fbb784: Create nasqueron-irc group on Eglide

Summary

This group is intended to run IRC bots on Eglide
for Nasqueron services, like Odderon, a darkbot.

When an account is created for an IRC bot, a suoders file can then
be provided to allow bot managers in this nasqueron-irc group to use
sudo from their accounts to run commands on this account.

To provide groups, two operations are so needed:

document in GIDs to avoid conflicts
add to pillar/users/shellgroups.sls for actual creation

Test Plan

$ ssh eglide id -Gn
dereckson wheel shell nasqueron-irc

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

No Lint Coverage

Unit

No Test Coverage

Branch

nasqueron-irc (branched from master)

Build Status

Buildable 1317
Build 1565: arc lint + arc unit

Event Timeline

dereckson created this revision.Jan 25 2017, 11:40

dereckson added a child revision: D857: Create odderon service account on Eglide.Jan 25 2017, 11:43

dereckson edited the summary of this revision. (Show Details)Jan 25 2017, 12:14

Create group

dereckson edited the summary of this revision. (Show Details)Jan 25 2017, 12:21

Fix for loop

Declare new pillar

Simplify and fix JINJA code

Salt master

$ salt '*' saltutil.refresh_pillar
[…]
$ salt eglide state.apply roles/shellserver/users/
[…]
----------
          ID: group_nasqueron-irc
    Function: group.present
        Name: nasqueron-irc
      Result: True
     Comment: New group nasqueron-irc created
     Started: 13:10:37.453357
    Duration: 783.014 ms
     Changes:   
              ----------
              gid:
                  829
              members:
                  - dereckson
              name:
                  nasqueron-irc
              passwd:
                  x
[…]